Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN p9_read_work() doesn't set Rworksched and doe…Check if you run itEPSS 0.17%Dec 8, 2025
- Low2.1A flaw has been found in code-projects Question Paper Generator up to 1.0.Check if you run itEPSS 0.35%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.23%Dec 7, 2025
- Medium4.3Nextcloud Tables allows you to create your own tables with individual columns.Check if you run itEPSS 0.28%Dec 5, 2025
- Low2.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar.Check if you run itEPSS 0.31%Dec 5, 2025
- Medium6.5Nextcloud Calendar is a calendar app for Nextcloud.Check if you run itEPSS 0.29%Dec 5, 2025
- Critical9.4Langflow Origin Validation Error VulnerabilityPatch nowKEVEPSS 92.81%Dec 5, 2025
- Medium5.4mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server.Check if you run itEPSS 0.65%Dec 5, 2025
- Medium5.3The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3.Check if you run itEPSS 0.37%Dec 5, 2025
- Medium4.3The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up…Check if you run itEPSS 0.12%Dec 5, 2025
- Medium4.3The Torod – The smart shipping and delivery portal for e-shops and retailers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an…Check if you run itEPSS 0.15%Dec 5, 2025
- Medium6.1The dream gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Dec 5, 2025
- Medium4.3The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.Check if you run itEPSS 0.15%Dec 5, 2025
- Medium4.3The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7.Check if you run itEPSS 0.16%Dec 5, 2025
- Medium4.3The Image Optimizer by wps.sk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Dec 5, 2025
- High8.8The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery i…Check if you run itEPSS 0.33%Dec 5, 2025
- High7.5Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps.Check if you run itEPSS 0.44%Dec 4, 2025
- High8.7Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.Check if you run itEPSS 0.44%Dec 4, 2025
- High7.5Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.Check if you run itEPSS 0.21%Dec 4, 2025
- High8.3The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access…Check if you run itEPSS 0.26%Dec 4, 2025
- Low1.8Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.Check if you run itEPSS 0.16%Dec 4, 2025
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 4.43%Dec 4, 2025
- High8.7There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure.Check if you run itEPSS 0.62%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on request_irq() failure The mlx5_irq_alloc() function can ina…Check if you run itEPSS 0.16%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.current_limit is set when setting pfn limits On nios2, with CONFIG_FLAT…Check if you run itEPSS 0.15%Dec 4, 2025
Sort