Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the check_changes in file…Check if you run itEPSS 2.38%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in fi…Check if you run itEPSS 2.84%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator v…Check if you run itEPSS 0.21%Dec 11, 2025
- Low2.1A vulnerability was identified in PowerJob up to 5.1.2.Check if you run itEPSS 0.35%Dec 11, 2025
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an au…Check if you run itEPSS 0.27%Dec 11, 2025
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an au…Check if you run itEPSS 0.30%Dec 11, 2025
- High8.7Form.io is a combined Form and API platform for Serverless applications.Check if you run itEPSS 0.31%Dec 11, 2025
- Medium5.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.26%Dec 11, 2025
- Medium6.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 11, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.88%Dec 11, 2025
- Medium5.11Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.Check if you run itEPSS 0.21%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality.Check if you run itEPSS 0.18%Dec 10, 2025
- Low3.5A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.Check if you run itEPSS 0.19%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel).Check if you run itEPSS 0.16%Dec 10, 2025
- High8.2Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.Check if you run itEPSS 0.59%Dec 10, 2025
- High8.8The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4.Check if you run itEPSS 0.45%Dec 10, 2025
- Low3.7Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.22%Dec 10, 2025
- Low3.6The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container.Check if you run itEPSS 0.14%Dec 10, 2025
- High8.6ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.44%Dec 9, 2025
- Medium4.9Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.36%Dec 9, 2025
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.81%Dec 9, 2025
- Critical9.1Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.56%Dec 9, 2025
- Medium6.5A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion t…Check if you run itEPSS 0.21%Dec 9, 2025
- High7.2A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through…Check if you run itEPSS 1.71%Dec 9, 2025
- Low2.7An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions,…Check if you run itEPSS 0.21%Dec 9, 2025
Sort