Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3filelock is a platform-independent file lock for Python.Check if you run itEPSS 0.20%Dec 16, 2025
- Medium5.4An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing licensCheck if you run itEPSS 0.17%Dec 16, 2025
- Critical9.8Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API.Check if you run itEPSS 1.04%Dec 16, 2025
- Medium5.3To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows rCheck if you run itEPSS 0.23%Dec 16, 2025
- Low2.7PyMdown Extensions is a set of extensions for the markdown project.Check if you run itEPSS 0.48%Dec 16, 2025
- High7.8NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition.Check if you run itEPSS 0.13%Dec 16, 2025
- High8.4NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.Check if you run itEPSS 0.30%Dec 16, 2025
- Critical9.0NVIDIA Isaac Lab contains a deserialization vulnerability.Check if you run itEPSS 0.66%Dec 16, 2025
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection.Check if you run itEPSS 0.22%Dec 16, 2025
- High7.3NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file.Check if you run itEPSS 0.19%Dec 16, 2025
- Medium4.8Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links.Check if you run itEPSS 0.32%Dec 16, 2025
- High8.7D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentCheck if you run itEPSS 0.73%Dec 16, 2025
- Critical9.3PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint.Check if you run itEPSS 0.67%Dec 16, 2025
- Medium5.1WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript.Check if you run itEPSS 0.24%Dec 16, 2025
- High7.0WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters.Check if you run itEPSS 1.01%Dec 16, 2025
- High7.1WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes.Check if you run itEPSS 0.27%Dec 16, 2025
- Medium5.1PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form.Check if you run itEPSS 0.57%Dec 16, 2025
- Medium5.1Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts.Check if you run itEPSS 0.24%Dec 16, 2025
- Medium5.1Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts.Check if you run itEPSS 0.24%Dec 16, 2025
- Critical9.3phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation.Check if you run itEPSS 0.62%Dec 16, 2025
- High8.5tRPC allows users to build and consume fully typesafe APIs without schemas or code generation.Check if you run itEPSS 0.40%Dec 16, 2025
- High8.9FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.27%Dec 16, 2025
- Medium6.5GLPI is a free asset and IT management software package.Check if you run itEPSS 0.29%Dec 16, 2025
- High8.3Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.Check if you run itEPSS 0.23%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: parisc: Avoid crash due to unaligned access in unwinder Guenter Roeck reported this kernel crash on his emulatedCheck if you run itEPSS 0.18%Dec 16, 2025
Sort