Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.2A permissions issue was addressed with additional sandbox restrictions.Check if you run itEPSS 0.15%Dec 12, 2025
- Low3.3Apple macOS Sequoia/Sonoma/Tahoe Log Entry Data Redaction VulnerabilityPatch nowKEVEPSS 0.18%Dec 12, 2025
- Medium6.5A denial-of-service issue was addressed with improved input validation.Check if you run itEPSS 0.38%Dec 12, 2025
- Medium5.5A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.Check if you run itEPSS 0.13%Dec 12, 2025
- Medium6.8An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM).Check if you run itEPSS 0.15%Dec 12, 2025
- Medium4.6The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields.Check if you run itEPSS 0.19%Dec 12, 2025
- Medium5.1A security vulnerability has been detected in Qualitor up to 8.24.73.Check if you run itEPSS 0.25%Dec 12, 2025
- High8.7Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cCheck if you run itEPSS 0.56%Dec 12, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.Check if you run itEPSS 0.19%Dec 12, 2025
- Medium6.9A weakness has been identified in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 12, 2025
- High8.7Atcom 100M IP Phones firmware version 2.7.x.x contains an authenticated command injection vulnerability in the web configuration CGI script that allows attackers to execute arbitraCheck if you run itEPSS 1.56%Dec 12, 2025
- High8.7Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier.Check if you run itEPSS 0.42%Dec 12, 2025
- High8.6WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint.Check if you run itEPSS 0.43%Dec 12, 2025
- Critical9.3PCMan FTP Server 2.0 contains a buffer overflow vulnerability in the 'pwd' command that allows remote attackers to execute arbitrary code.Check if you run itEPSS 0.94%Dec 12, 2025
- High8.5Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system commands.Check if you run itEPSS 1.15%Dec 12, 2025
- Medium5.1Frappe Learning Management System (LMS) is a learning system that helps users structure their content.Check if you run itEPSS 0.17%Dec 12, 2025
- High8.7A vulnerability was found in UTT 进取 512W up to 1.7.7-171114.Check if you run itEPSS 3.47%Dec 12, 2025
- High8.6The Preset configuration https://v2.vuetifyjs.com/en/features/presets feature of Vuetify is vulnerable to Prototype Pollution https://cheatsheetseries.owasp.org/cheatsheets/PrototyCheck if you run itEPSS 0.34%Dec 12, 2025
- Medium4.3Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to perform domain spoofing via a crafted HTML page.Check if you run itEPSS 0.28%Dec 12, 2025
- Medium6.1Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.24%Dec 12, 2025
- Medium6.3Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page.Check if you run itEPSS 0.20%Dec 12, 2025
- Medium6.9A vulnerability has been found in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.43%Dec 12, 2025
- Medium6.9A flaw has been found in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.43%Dec 12, 2025
- Medium4.8A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2.Check if you run itEPSS 0.14%Dec 12, 2025
- Medium5.3A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0.Check if you run itEPSS 0.23%Dec 12, 2025
Sort