Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0Dify is an LLM application development platform.Check if you run itEPSS 5.73%Oct 17, 2025
- High7.5A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s sysCheck if you run itEPSS 0.61%Oct 17, 2025
- High8.6Git LFS is a Git extension for versioning large files.Check if you run itEPSS 1.05%Oct 17, 2025
- Critical9.8A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current projects on an end user’Check if you run itEPSS 0.65%Oct 17, 2025
- Critical9.8Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file coCheck if you run itEPSS 0.75%Oct 17, 2025
- High8.8In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification.Check if you run itEPSS 0.61%Oct 17, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason C.Check if you run itEPSS 0.27%Oct 17, 2025
- High8.6Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass.Check if you run itEPSS 0.66%Oct 17, 2025
- Critical9.8Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability.Check if you run itEPSS 1.42%Oct 17, 2025
- Critical9.8Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability.Check if you run itEPSS 0.50%Oct 17, 2025
- Medium4.3The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0.Check if you run itEPSS 0.27%Oct 17, 2025
- Medium6.3In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.Check if you run itEPSS 0.46%Oct 17, 2025
- Low2.4In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing aCheck if you run itEPSS 0.56%Oct 17, 2025
- Low2.4In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when pCheck if you run itEPSS 0.34%Oct 17, 2025
- Low1.0In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing aCheck if you run itEPSS 0.29%Oct 17, 2025
- Low2.4In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parCheck if you run itEPSS 0.27%Oct 17, 2025
- Low2.1In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get() when parsinCheck if you run itEPSS 0.17%Oct 17, 2025
- Medium6.9In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_icmpv6_validate_options() when handlingCheck if you run itEPSS 0.41%Oct 17, 2025
- Medium6.9In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling uniCheck if you run itEPSS 0.31%Oct 17, 2025
- Medium6.9In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process(Check if you run itEPSS 0.33%Oct 17, 2025
- Medium6.4Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versionCheck if you run itEPSS 1.13%Oct 17, 2025
- Critical9.3The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the serverCheck if you run itEPSS 1.75%Oct 17, 2025
- Critical9.2Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verificatioCheck if you run itEPSS 0.67%Oct 17, 2025
- High8.7Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary systCheck if you run itEPSS 0.83%Oct 17, 2025
- Critical9.9An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers.Check if you run itEPSS 0.60%Oct 17, 2025
Sort