Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7Datasette is an open source multi-tool for exploring and publishing data.Check if you run itEPSS 0.41%Nov 7, 2025
- Medium4.8A weakness has been identified in mruby 3.4.0.Check if you run itEPSS 0.17%Nov 7, 2025
- High7.1HumHub is an Open Source Enterprise Social Network.Check if you run itEPSS 0.24%Nov 7, 2025
- Medium4.4Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked storage device.Check if you run itEPSS 0.13%Nov 7, 2025
- Medium4.4Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device orCheck if you run itEPSS 0.14%Nov 7, 2025
- High7.4LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).Check if you run itEPSS 0.89%Nov 7, 2025
- Critical10.0A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping.Check this weekEPSS 39.77%Nov 7, 2025
- Medium6.5IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an aCheck if you run itEPSS 0.31%Nov 7, 2025
- Medium5.3A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures.Check if you run itEPSS 0.39%Nov 7, 2025
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service duCheck if you run itEPSS 0.31%Nov 7, 2025
- Medium4.6IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) clpplus command exposes user credentialsCheck if you run itEPSS 0.19%Nov 7, 2025
- Medium5.1IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local user to cause a denial of service due to theCheck if you run itEPSS 0.11%Nov 7, 2025
- Medium6.2IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a local user to cause a denial of service due to improper neutralization of specCheck if you run itEPSS 0.14%Nov 7, 2025
- Medium6.5Improper handling of malformed Connection Request with the interval set to be 1 (which supposed to be illegal) and the chM 0x7CFFFFFFFF triggers a crash.Check if you run itEPSS 0.20%Nov 7, 2025
- High7.4IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalaCheck if you run itEPSS 0.13%Nov 7, 2025
- Medium4.7KubeVirt is a virtual machine management add-on for Kubernetes.Check if you run itEPSS 0.15%Nov 7, 2025
- Medium6.3IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after accountCheck if you run itEPSS 0.17%Nov 7, 2025
- Medium5.3IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service asCheck if you run itEPSS 0.30%Nov 7, 2025
- Medium5.4IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.Check if you run itEPSS 0.18%Nov 7, 2025
- Medium6.5IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable toCheck if you run itEPSS 0.31%Nov 7, 2025
- High8.7Zitadel is an open source identity management platform.Check if you run itEPSS 0.30%Nov 7, 2025
- Medium6.9An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive dataCheck if you run itEPSS 0.16%Nov 7, 2025
- Medium5.1A security flaw has been discovered in Campcodes School File Management 1.0.Check if you run itEPSS 0.36%Nov 7, 2025
- High7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.Check if you run itEPSS 0.21%Nov 7, 2025
- High7.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.65%Nov 7, 2025
Sort