Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability.Check if you run itEPSS 0.37%Dec 23, 2025
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.72%Dec 23, 2025
- Critical9.3PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attacke…Check if you run itEPSS 0.61%Dec 23, 2025
- Medium5.1CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles.Check if you run itEPSS 0.28%Dec 23, 2025
- Medium5.1CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding.Check if you run itEPSS 0.26%Dec 23, 2025
- Medium5.1Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts through various input parameters.Check if you run itEPSS 0.24%Dec 23, 2025
- High8.5Epic Games Easy Anti-Cheat 4.0 contains an unquoted service path vulnerability that allows local non-privileged users to execute arbitrary code with elevated system privileges.Check if you run itEPSS 0.18%Dec 23, 2025
- Medium5.1CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in private messages.Check if you run itEPSS 0.28%Dec 23, 2025
- High8.6CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files.Check if you run itEPSS 1.08%Dec 23, 2025
- High8.6CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template files.Check if you run itEPSS 0.88%Dec 23, 2025
- High8.6CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute arbitrary code.Check if you run itEPSS 0.78%Dec 23, 2025
- Medium5.1CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript.Check if you run itEPSS 0.27%Dec 23, 2025
- Medium5.1Zucchetti Axess CLOKI Access Control 1.64 contains a cross-site request forgery vulnerability that allows attackers to manipulate access control settings without user interaction.Check if you run itEPSS 0.20%Dec 23, 2025
- High8.7Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts by manipulating session cookies.Check if you run itEPSS 0.46%Dec 23, 2025
- High8.7Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate database queries through multiple vulnerable parameters.Check if you run itEPSS 0.33%Dec 23, 2025
- None0.0This CVE id was assigned but later discarded.Check if you run itEPSS 0.00%Dec 23, 2025
- None0.0This CVE id was assigned but later discarded.Check if you run itEPSS 0.00%Dec 23, 2025
- None0.0This CVE id was assigned but later discarded.Check if you run itEPSS 0.00%Dec 23, 2025
- Critical9.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue.Check if you run itEPSS 0.62%Dec 23, 2025
- Critical9.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.Check if you run itEPSS 0.69%Dec 23, 2025
- Critical9.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.Check if you run itEPSS 0.81%Dec 23, 2025
- UnknownThis CVE id was assigned to an issue which was later deemed not security relevant.Check if you run itEPSS 0.00%Dec 23, 2025
- UnknownThis CVE id was assigned to an issue which was later deemed not security relevant.Check if you run itEPSS 0.00%Dec 23, 2025
- UnknownThis CVE id was assigned to an issue which was later deemed not security relevant.Check if you run itEPSS 0.00%Dec 23, 2025
- UnknownRisk of __proto__ pollution VulnerabilityOpen the advisoryDec 23, 2025
Sort