Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A weakness has been identified in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.37%Dec 28, 2025
- High7.8In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.Check if you run itEPSS 0.15%Dec 28, 2025
- Medium5.1A security flaw has been discovered in EyouCMS up to 1.7.6.Check if you run itEPSS 0.38%Dec 28, 2025
- Low2.3A vulnerability was determined in Halo up to 2.21.10.Check if you run itEPSS 0.25%Dec 28, 2025
- Medium5.3A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06.Check this weekEPSS 13.32%Dec 28, 2025
- High8.7A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0.Check this weekEPSS 11.37%Dec 28, 2025
- High8.7A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0.Check this weekEPSS 10.72%Dec 28, 2025
- Medium6.9A vulnerability was detected in ZKTeco BioTime up to 9.0.3/9.0.4/9.5.2.Check if you run itEPSS 0.29%Dec 28, 2025
- Medium6.3A security flaw has been discovered in OpenCart up to 4.1.0.3.Check if you run itEPSS 0.41%Dec 28, 2025
- Medium5.9In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed materiCheck if you run itEPSS 0.11%Dec 27, 2025
- Medium5.1A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261.Check if you run itEPSS 0.37%Dec 27, 2025
- Medium6.5In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the totaCheck if you run itEPSS 0.46%Dec 27, 2025
- Medium6.9A flaw has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261.Check if you run itEPSS 0.33%Dec 27, 2025
- Critical9.9n8n is an open source workflow automation platform.Check this weekEPSS 13.17%Dec 26, 2025
- Critical9.3Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to modify JavaScript object prototypes via malformed data structCheck if you run itEPSS 0.50%Dec 26, 2025
- High7.7IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link.Check if you run itEPSS 0.12%Dec 26, 2025
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection.Check if you run itEPSS 0.20%Dec 26, 2025
- Low3.1IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data due by enumerating package identifiers.Check if you run itEPSS 0.24%Dec 26, 2025
- Low3.8IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API allowed users to access features that appeared disabled, poCheck if you run itEPSS 0.22%Dec 26, 2025
- Medium6.7IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user wiCheck if you run itEPSS 0.11%Dec 26, 2025
- Medium4.3IBM Db2 Intelligence Center 1.1.0, 1.1.1, 1.1.2 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.Check if you run itEPSS 0.21%Dec 26, 2025
- Critical9.8IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.Check if you run itEPSS 9.01%Dec 26, 2025
- High7.8IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking.Check if you run itEPSS 0.16%Dec 26, 2025
- Medium5.9IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.Check if you run itEPSS 0.33%Dec 26, 2025
- High7.8Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perform arbitrary code execution .Check if you run itEPSS 0.15%Dec 26, 2025
Sort