Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.Check if you run itEPSS 0.14%Sep 23, 2025
- High8.3Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.Check if you run itEPSS 0.37%Sep 23, 2025
- Medium6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.21%Sep 23, 2025
- Low2.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.18%Sep 23, 2025
- Critical9.1DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.50%Sep 23, 2025
- Medium6.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.18%Sep 23, 2025
- Low3.3An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled.Check if you run itEPSS 0.21%Sep 23, 2025
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.27%Sep 23, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding.Check if you run itEPSS 0.23%Sep 23, 2025
- Medium6.8A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication.Check if you run itEPSS 0.24%Sep 23, 2025
- Medium4.3A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling.Check if you run itEPSS 0.21%Sep 23, 2025
- High8.8A flaw was found in Libtiff.Check if you run itEPSS 0.97%Sep 23, 2025
- Medium6.8An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service.Check if you run itEPSS 0.69%Sep 23, 2025
- Medium4.8An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in thCheck if you run itEPSS 0.19%Sep 23, 2025
- Medium6.3A vulnerability has been found in Coinomi up to 1.7.6.Check if you run itEPSS 0.26%Sep 23, 2025
- Medium5.3The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer.Check if you run itEPSS 0.51%Sep 23, 2025
- High8.2The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction,Check if you run itEPSS 4.35%Sep 23, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in TalentSys Consulting Information Technology Industry Inc.Check if you run itEPSS 1.02%Sep 23, 2025
- High7.3Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518Check if you run itEPSS 0.38%Sep 23, 2025
- Critical9.3Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: PCheck if you run itEPSS 0.55%Sep 23, 2025
- High8.6No password for the root user is set in Novakon P series.Check if you run itEPSS 0.22%Sep 23, 2025
- Critical9.4A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions.Check if you run itEPSS 0.22%Sep 23, 2025
- Critical10.0A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.Check if you run itEPSS 1.17%Sep 23, 2025
- Medium6.5An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator.Check if you run itEPSS 0.33%Sep 23, 2025
- Medium5.3danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks.Check if you run itEPSS 0.28%Sep 23, 2025
Sort