Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint.Check if you run itEPSS 0.58%Aug 24, 2026
- High8.7RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses.Check if you run itEPSS 0.80%Aug 24, 2026
- High8.2RansomLook contains insufficient resource validation in the analysis PDF generation functionality.Check if you run itEPSS 0.41%Aug 24, 2026
- High8.2RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts.Check if you run itEPSS 0.59%Aug 24, 2026
- High8.7RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels.Check if you run itEPSS 0.45%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…Check if you run itEPSS 0.45%Aug 24, 2026
- Critical9.2RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to r…Check if you run itEPSS 0.69%Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.Check if you run itEPSS 0.69%Aug 24, 2026
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…Check if you run itEPSS 0.49%Aug 24, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- Critical9.3phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an ins…Check if you run itEPSS 0.64%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.23%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.40%Aug 24, 2026
- Medium6.0The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates.Check if you run itEPSS 0.24%Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…Check if you run itEPSS 0.24%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Check if you run itEPSS 0.41%Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.Check if you run itEPSS 0.66%Aug 24, 2026
- High7.8ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- High8.2ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- High7.0ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- High7.1ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.27%Aug 24, 2026
- High8.4exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output.Check if you run itEPSS 0.41%Aug 24, 2026
- High8.7exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths.Check if you run itEPSS 0.51%Aug 24, 2026
- Critical9.3exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects.Check if you run itEPSS 0.60%Aug 24, 2026
Sort