Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.Check if you run itEPSS 0.42%Dec 18, 2025
- High7.5A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.Check if you run itEPSS 0.41%Dec 18, 2025
- High7.5A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.Check if you run itEPSS 0.34%Dec 18, 2025
- High7.5A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.Check if you run itEPSS 0.41%Dec 18, 2025
- High7.5A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev.Check if you run itEPSS 0.43%Dec 18, 2025
- High7.5A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version upf-epc-pfcpiface:2.1.3-dev.Check if you run itEPSS 0.44%Dec 18, 2025
- High7.5The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests.Check if you run itEPSS 0.56%Dec 18, 2025
- High7.5An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to thCheck if you run itEPSS 0.44%Dec 18, 2025
- High7.5An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), the UPF crashes with a reachable assertion in ( ) if the CreatCheck if you run itEPSS 0.43%Dec 18, 2025
- High7.5An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c48c38aa9a7014 (2025-10Check if you run itEPSS 0.53%Dec 18, 2025
- High7.5An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b (2023-02-28).Check if you run itEPSS 0.53%Dec 18, 2025
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability in yohanawi Hotel Management System (commit 87e004a) allows a remote attacker to execute arbitrary web script via the 'error' pCheck if you run itEPSS 0.26%Dec 18, 2025
- Medium5.4A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file.Check if you run itEPSS 0.22%Dec 18, 2025
- Medium5.4A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file.Check if you run itEPSS 0.18%Dec 18, 2025
- High7.5Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.Check if you run itEPSS 0.38%Dec 18, 2025
- High7.5DO NOT USE THIS CVE RECORD.Check this weekEPSS 55.00%Dec 18, 2025
- Medium5.3An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint.Check if you run itEPSS 0.55%Dec 18, 2025
- Critical9.8A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3.Check if you run itEPSS 0.71%Dec 18, 2025
- Critical9.1A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint.Check if you run itEPSS 0.22%Dec 18, 2025
- High7.5langgenius dify Improper Access ControlPatch nowKEVEPSS 18.71%Dec 18, 2025
- Critical9.1A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint.Check if you run itEPSS 0.24%Dec 18, 2025
- Critical9.8Default credentials in Dify thru 1.5.1.Check if you run itEPSS 0.86%Dec 18, 2025
- High8.2A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content.Check if you run itEPSS 0.28%Dec 17, 2025
- Medium5.1A vulnerability has been found in ZZCMS 2025.Check if you run itEPSS 0.46%Dec 17, 2025
- High7.1Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files.Check if you run itEPSS 0.81%Dec 17, 2025
Sort