Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system.Check if you run itEPSS 0.19%Dec 26, 2025
- High8.6Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the software packageCheck if you run itEPSS 0.26%Dec 26, 2025
- Medium5.8Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML fCheck if you run itEPSS 0.20%Dec 26, 2025
- Medium6.3Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device ManagerCheck if you run itEPSS 0.10%Dec 26, 2025
- Medium5.2Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video aCheck if you run itEPSS 0.40%Dec 26, 2025
- Medium5.4In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.Check if you run itEPSS 0.25%Dec 26, 2025
- Medium6.3Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission managemeCheck if you run itEPSS 0.23%Dec 26, 2025
- Medium6.3Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service doCheck if you run itEPSS 0.18%Dec 26, 2025
- Medium6.9A vulnerability was identified in simstudioai sim up to 0.5.27.Check if you run itEPSS 0.79%Dec 26, 2025
- Medium5.8In Gitea before 1.21.2, an anonymous user can visit a private user's project.Check if you run itEPSS 0.36%Dec 26, 2025
- Medium5.0Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.Check if you run itEPSS 0.28%Dec 26, 2025
- Medium5.3Gitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order.Check if you run itEPSS 0.36%Dec 26, 2025
- Medium5.3A vulnerability was determined in YunaiV yudao-cloud up to 2025.11.Check if you run itEPSS 0.30%Dec 26, 2025
- Medium5.4Gitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text.Check if you run itEPSS 0.25%Dec 26, 2025
- Medium6.9A vulnerability was found in Alteryx Server.Check if you run itEPSS 0.59%Dec 26, 2025
- Medium4.9Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.Check if you run itEPSS 0.26%Dec 26, 2025
- Low3.1In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.Check if you run itEPSS 0.27%Dec 26, 2025
- High8.2Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.Check if you run itEPSS 0.33%Dec 26, 2025
- Medium5.1A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1.Check if you run itEPSS 0.28%Dec 26, 2025
- Medium5.3A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414.Check if you run itEPSS 0.39%Dec 26, 2025
- Medium4.3Gitea before 1.25.2 mishandles authorization for deletion of releases.Check if you run itEPSS 0.38%Dec 26, 2025
- Medium5.3A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414.Check if you run itEPSS 0.41%Dec 26, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Dec 26, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Dec 26, 2025
- High8.7A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114.Check if you run itEPSS 0.85%Dec 26, 2025
Sort