Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5On affected platforms, restricted users could use SSH port forwarding to access host-internal servicesCheck if you run itEPSS 0.24%Oct 29, 2025
- High7.8On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.Check if you run itEPSS 0.13%Oct 29, 2025
- Medium5.3The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines.Check if you run itEPSS 0.56%Oct 29, 2025
- High7.5Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method.Check if you run itEPSS 0.38%Oct 29, 2025
- Medium4.3tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.Check if you run itEPSS 0.44%Oct 29, 2025
- High7.5The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input.Check if you run itEPSS 0.66%Oct 29, 2025
- Medium5.3Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit.Check if you run itEPSS 0.56%Oct 29, 2025
- Medium5.3Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.Check if you run itEPSS 0.56%Oct 29, 2025
- Medium5.3The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL.Check if you run itEPSS 0.47%Oct 29, 2025
- High7.5The ParseAddress function constructs domain-literal address components through repeated string concatenation.Check if you run itEPSS 0.65%Oct 29, 2025
- Medium5.3When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.Check if you run itEPSS 0.47%Oct 29, 2025
- High7.5Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate.Check if you run itEPSS 0.41%Oct 29, 2025
- Medium6.9Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET versiCheck if you run itEPSS 0.27%Oct 29, 2025
- High8.7Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain liveCheck if you run itEPSS 0.42%Oct 29, 2025
- High7.8GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.58%Oct 29, 2025
- High7.8Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability.Check if you run itEPSS 0.21%Oct 29, 2025
- High7.8Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.21%Oct 29, 2025
- High7.8Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.20%Oct 29, 2025
- Medium4.9Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 1.57%Oct 29, 2025
- High8.1MLflow Weak Password Requirements Authentication Bypass Vulnerability.Check if you run itEPSS 1.44%Oct 29, 2025
- High8.1MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability.Patch nowKEVEPSS 26.28%Oct 29, 2025
- Critical9.8win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 2.77%Oct 29, 2025
- High7.8Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.19%Oct 29, 2025
- High7.8Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.19%Oct 29, 2025
- High7.8Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.19%Oct 29, 2025
Sort