Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.Check if you run itEPSS 0.38%Nov 18, 2025
- High7.5The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirCheck if you run itEPSS 0.63%Nov 18, 2025
- Critical9.8In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability.Check if you run itEPSS 0.50%Nov 18, 2025
- Medium5.3A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5.Check if you run itEPSS 8.25%Nov 17, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 17, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 17, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 17, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 17, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 17, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.48%Nov 17, 2025
- High8.7A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07.Check if you run itEPSS 3.85%Nov 17, 2025
- High8.7A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.Check if you run itEPSS 0.24%Nov 17, 2025
- High8.7A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 PlusCheck if you run itEPSS 0.23%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.17%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.15%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.15%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.17%Nov 17, 2025
- High8.8A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.Check if you run itEPSS 0.33%Nov 17, 2025
- High8.7A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47.Check if you run itEPSS 0.88%Nov 17, 2025
- Medium5.4The The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.Check if you run itEPSS 0.24%Nov 17, 2025
- High8.8A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.Check if you run itEPSS 0.29%Nov 17, 2025
- Medium5.3A vulnerability was determined in code-projects Courier Management System 1.0.Check if you run itEPSS 0.40%Nov 17, 2025
- Medium5.3NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management.Check if you run itEPSS 0.30%Nov 17, 2025
- Medium5.1A vulnerability was identified in code-projects Courier Management System 1.0.Check if you run itEPSS 0.41%Nov 17, 2025
- Medium6.9A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0.Check if you run itEPSS 0.42%Nov 17, 2025
Sort