Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without loCheck if you run itEPSS 6.36%Dec 19, 2025
- Medium5.3A vulnerability was detected in Edimax BR-6208AC 1.02.Check if you run itEPSS 0.53%Dec 19, 2025
- Medium5.3A weakness has been identified in JeecgBoot up to 3.9.0.Check if you run itEPSS 0.51%Dec 19, 2025
- Medium5.3A security flaw has been discovered in JeecgBoot up to 3.9.0.Check if you run itEPSS 0.35%Dec 19, 2025
- High8.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad functCheck if you run itEPSS 0.57%Dec 19, 2025
- Medium5.1A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.40%Dec 19, 2025
- Medium5.1A weakness has been identified in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.36%Dec 19, 2025
- Medium4.9The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment ideCheck if you run itEPSS 0.40%Dec 19, 2025
- Medium6.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a cCheck if you run itEPSS 0.52%Dec 19, 2025
- Medium5.0The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields.Check if you run itEPSS 0.41%Dec 19, 2025
- High8.3A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inlinCheck if you run itEPSS 1.11%Dec 19, 2025
- Medium6.4The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parameter because any tenant's assets cCheck if you run itEPSS 0.36%Dec 19, 2025
- High7.6EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal.Check if you run itEPSS 0.57%Dec 19, 2025
- Medium6.5Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality.Check if you run itEPSS 0.33%Dec 19, 2025
- Medium6.0Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system.Check if you run itEPSS 0.22%Dec 19, 2025
- High7.5Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability.Check if you run itEPSS 0.53%Dec 19, 2025
- Medium5.3Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functionality.Check if you run itEPSS 0.44%Dec 19, 2025
- Medium6.1Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.Check if you run itEPSS 0.13%Dec 19, 2025
- High7.5The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem.Check if you run itEPSS 0.61%Dec 19, 2025
- Critical9.8An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window.Check if you run itEPSS 0.50%Dec 19, 2025
- High7.5igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership report packet with a malicious source aCheck if you run itEPSS 0.52%Dec 19, 2025
- Medium6.9Cowrie Unrestricted wget/curl Emulation SSRF-Based DDoS AmplificationPatch nowKEVEPSS 0.68%Dec 19, 2025
- UnknownD-Tale Custom Filter Input 'update-settings' Remote Code ExecutionPatch nowKEVEPSS 2.42%Dec 19, 2025
- Unknownjoedolson my_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 63.14%Dec 19, 2025
- Medium5.1A security flaw has been discovered in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.36%Dec 18, 2025
Sort