Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- High7.5ninjaforms ninja_forms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.44%Dec 17, 2025
- High7.8Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory.Check if you run itEPSS 0.20%Dec 17, 2025
- High7.8Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory.Check if you run itEPSS 0.20%Dec 17, 2025
- High7.5In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratCheck if you run itEPSS 0.26%Dec 17, 2025
- Medium5.3In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) tCheck if you run itEPSS 0.19%Dec 17, 2025
- Critical9.8Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).Check if you run itEPSS 0.50%Dec 17, 2025
- High8.8Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.25%Dec 16, 2025
- High8.8Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.00%Dec 16, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.20%Dec 16, 2025
- High8.7SIPGO is a library for writing SIP services in the GO language.Check if you run itEPSS 0.55%Dec 16, 2025
- Medium6.5GLPI is a free asset and IT management software package.Check if you run itEPSS 0.22%Dec 16, 2025
- High7.4An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.Check if you run itEPSS 0.34%Dec 16, 2025
- High7.4An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.Check if you run itEPSS 0.32%Dec 16, 2025
- High7.4An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024.Check if you run itEPSS 0.41%Dec 16, 2025
- High7.4An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024.Check if you run itEPSS 0.43%Dec 16, 2025
- Medium6.9A vulnerability in the web interface of the Güralp Fortimus Series, Minimus Series and Certimus Series allows an unauthenticated attacker with network access to send specially-crafCheck if you run itEPSS 0.39%Dec 16, 2025
- Medium6.2Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms.Check if you run itEPSS 0.10%Dec 16, 2025
- High7.1On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3Check if you run itEPSS 0.30%Dec 16, 2025
- High7.0Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo cameras, allowing attackers to brute force the password in the lCheck if you run itEPSS 0.19%Dec 16, 2025
- Critical9.9The Open edX Platform is a learning management platform.Check if you run itEPSS 0.32%Dec 16, 2025
- High7.5Expr is an expression language and expression evaluation for Go.Check if you run itEPSS 0.42%Dec 16, 2025
- High7.5@vitejs/plugin-rs provides React Server Components (RSC) support for Vite.Check if you run itEPSS 0.50%Dec 16, 2025
- High8.1systeminformation is a System and OS information library for node.js.Check this weekEPSS 12.99%Dec 16, 2025
- High8.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.33%Dec 16, 2025
Sort