Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-filCheck if you run itEPSS 0.43%Aug 22, 2025
- High7.3Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.TCheck if you run itEPSS 0.29%Aug 22, 2025
- High7.3Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affectsCheck if you run itEPSS 0.29%Aug 22, 2025
- Critical9.3Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local CodeCheck if you run itEPSS 0.21%Aug 22, 2025
- High8.6gnark is a zero-knowledge proof system framework.Check if you run itEPSS 0.21%Aug 22, 2025
- High8.8In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB.Check if you run itEPSS 0.34%Aug 22, 2025
- High7.2User with high privileges is able to introduce a SQLi using the Meta Service indicator page.Check if you run itEPSS 0.40%Aug 22, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.39%Aug 22, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.32%Aug 22, 2025
- Medium5.3A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.QCheck if you run itEPSS 0.26%Aug 22, 2025
- High8.8Audiobookshelf is an open-source self-hosted audiobook server.Check if you run itEPSS 0.46%Aug 22, 2025
- Medium5.3The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration.Check if you run itEPSS 0.39%Aug 22, 2025
- High8.1Roo Code is an AI-powered autonomous coding agent that lives in users' editors.Check if you run itEPSS 0.75%Aug 22, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled trigger…Check if you run itEPSS 0.21%Aug 22, 2025
- Low2.5UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.63%Aug 22, 2025
- High8.1UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.44%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xfrm_state_find In case of preemption, xfrm_state_look_at will finCheck if you run itEPSS 0.12%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Revert "drm/prime: Use dma_buf from GEM object instance" This reverts commit f83a9b8c7fd0557b0c50784bfdc1bbe9140Check if you run itEPSS 0.13%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" This reverts commit cce16fcd7446dcff7480cd9d2Check if you run itEPSS 0.13%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dma_buf from GEM object instance" This reverts commit e8afa1557f4f963c9a511bd2c6074a941Check if you run itEPSS 0.13%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't jump outCheck if you run itEPSS 0.17%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() and manipulate SP to change to different stacks aCheck if you run itEPSS 0.17%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-shmem: Use dma_buf from GEM object instance" This reverts commit 1a148af06000e545e714fe3210af3d7Check if you run itEPSS 0.13%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset coupling_desc.n_coupCheck if you run itEPSS 0.17%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters.Check if you run itEPSS 0.15%Aug 22, 2025
Sort