Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request.Check if you run itEPSS 0.25%Nov 6, 2025
- UnknownNot a security vulnerabilityOpen the advisoryNov 6, 2025
- Medium6.8On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset strCheck if you run itEPSS 0.22%Nov 6, 2025
- High8.2An issue was discovered in AnyDesk through 9.0.4.Check if you run itEPSS 0.32%Nov 6, 2025
- Critical9.8An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android bCheck if you run itEPSS 0.70%Nov 6, 2025
- High7.5An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android bCheck if you run itEPSS 0.51%Nov 6, 2025
- High7.5An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0.Check if you run itEPSS 0.32%Nov 6, 2025
- High8.9DataEase is an open source data visualization analysis tool.Check if you run itEPSS 1.16%Nov 5, 2025
- Medium6.5ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.42%Nov 5, 2025
- High7.3Youki is a container runtime written in Rust.Check if you run itEPSS 0.27%Nov 5, 2025
- High7.3Youki is a container runtime written in Rust.Check if you run itEPSS 0.26%Nov 5, 2025
- High8.1Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptoCheck if you run itEPSS 0.20%Nov 5, 2025
- High8.8Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authentication token for DCV-based WorkSpaceCheck if you run itEPSS 0.20%Nov 5, 2025
- Medium5.2A reflected cross-site scripting (XSS) vulnerability exists in the management console of multiple WSO2 products due to improper output encoding.Check if you run itEPSS 0.19%Nov 5, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding.Check if you run itEPSS 0.21%Nov 5, 2025
- Medium4.6This issue was addressed by restricting options offered on a locked device.Check if you run itEPSS 0.19%Nov 5, 2025
- Medium4.8A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c.Check if you run itEPSS 0.22%Nov 5, 2025
- High8.4An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines.Check if you run itEPSS 0.47%Nov 5, 2025
- Medium5.4HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure.Check if you run itEPSS 0.19%Nov 5, 2025
- High8.4An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services.Check if you run itEPSS 0.60%Nov 5, 2025
- Medium6.5An XML External Entity (XXE) vulnerability exists in multiple WSO2 products due to improper configuration of the XML parser.Check if you run itEPSS 0.46%Nov 5, 2025
- High7.3Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability.Check if you run itEPSS 0.14%Nov 5, 2025
- Medium6.7Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confCheck if you run itEPSS 0.14%Nov 5, 2025
- Medium6.7Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability.Check if you run itEPSS 0.10%Nov 5, 2025
- Medium5.3Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CCheck if you run itEPSS 0.37%Nov 5, 2025
Sort