Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3A type confusion issue was addressed with improved state handling.Check this weekEPSS 34.14%Dec 17, 2025
- Medium4.3A buffer overflow issue was addressed with improved memory handling.Check if you run itEPSS 0.77%Dec 17, 2025
- Medium5.5The issue was addressed with additional permissions checks.Check if you run itEPSS 0.16%Dec 17, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.19%Dec 17, 2025
- Medium4.7Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.Check if you run itEPSS 0.19%Dec 17, 2025
- High8.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Check if you run itEPSS 0.26%Dec 17, 2025
- Low1.7RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.Check if you run itEPSS 0.97%Dec 17, 2025
- Medium6.0Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to differentCheck if you run itEPSS 0.11%Dec 17, 2025
- Medium6.0Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to differeCheck if you run itEPSS 0.12%Dec 17, 2025
- Medium6.0Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when thCheck if you run itEPSS 0.21%Dec 17, 2025
- Medium6.0Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when theCheck if you run itEPSS 0.21%Dec 17, 2025
- Medium6.0Missing cryptographic key commitment in the AWS SDK for C++ may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when theCheck if you run itEPSS 0.17%Dec 17, 2025
- Medium6.0Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to differeCheck if you run itEPSS 0.11%Dec 17, 2025
- Medium5.3AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video.Check if you run itEPSS 0.28%Dec 17, 2025
- High8.7AVideo versions prior to 20.1 permit any authenticated user to upload comment images to videos owned by other users.Check if you run itEPSS 0.40%Dec 17, 2025
- High8.7AVideo versions prior to 20.1 are vulnerable to an insecure direct object reference (IDOR) that allows any authenticated user to delete media files belonging to other users.Check if you run itEPSS 0.33%Dec 17, 2025
- High8.7AVideo versions prior to 20.1 allow any authenticated user to upload files into directories belonging to other users due to an insecure direct object reference.Check if you run itEPSS 0.42%Dec 17, 2025
- Critical9.3AVideo versions prior to 20.1 with the ImageGallery plugin enabled is vulnerable to unauthenticated file upload and deletion.Check if you run itEPSS 0.47%Dec 17, 2025
- Medium4.8AVideo versions prior to 20.1 are vulnerable to an open redirect flaw due to missing validation of the cancelUri parameter during user login.Check if you run itEPSS 0.19%Dec 17, 2025
- Medium4.8AVideo versions prior to 20.1 contain an open redirect vulnerability caused by insufficient validation of the siteRedirectUri parameter during user registration.Check if you run itEPSS 0.19%Dec 17, 2025
- Medium6.9AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints.Check if you run itEPSS 0.85%Dec 17, 2025
- Medium6.9AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint.Check if you run itEPSS 0.85%Dec 17, 2025
- UnknownCredential caching in Headlamp with Helm enabledOpen the advisoryDec 17, 2025
- Low1.7RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.Check if you run itEPSS 0.68%Dec 17, 2025
- High8.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.29%Dec 17, 2025
Sort