Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpointCheck if you run itEPSS 0.18%Jul 28, 2025
- Medium5.8In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithmsCheck if you run itEPSS 0.21%Jul 28, 2025
- Medium4.8In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset pageCheck if you run itEPSS 0.93%Jul 28, 2025
- Medium4.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configurationCheck if you run itEPSS 0.25%Jul 28, 2025
- Medium4.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependenciesCheck if you run itEPSS 0.25%Jul 28, 2025
- Low3.7In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCheck if you run itEPSS 0.15%Jul 28, 2025
- Medium5.4In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCheck if you run itEPSS 0.18%Jul 28, 2025
- Medium6.1In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictionsCheck if you run itEPSS 0.32%Jul 28, 2025
- High7.1Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections.Check if you run itEPSS 0.17%Jul 28, 2025
- High7.2Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certaiCheck if you run itEPSS 0.13%Jul 28, 2025
- Medium5.4IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection.Check if you run itEPSS 0.24%Jul 28, 2025
- High7.5IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.Check if you run itEPSS 0.40%Jul 28, 2025
- Critical9.8CodeIgniter is a PHP full-stack web framework.Check if you run itEPSS 1.50%Jul 28, 2025
- High8.7Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query executionCheck if you run itEPSS 0.49%Jul 28, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in bsc Peru Cocktails App 1.0.0 on Android.Check if you run itEPSS 0.15%Jul 28, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0.Check if you run itEPSS 0.51%Jul 28, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used,Check if you run itEPSS 0.38%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to ensure the provided buffeCheck if you run itEPSS 0.26%Jul 28, 2025
- High8.2mptcp: make fallback action and fallback decision atomicCheck if you run itEPSS 0.24%Jul 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should only be invoked when freCheck if you run itEPSS 0.36%Jul 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchroCheck if you run itEPSS 0.77%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add set_channel_map api support" This reverts commit 7796c97df6b1b2206681a07Check if you run itEPSS 0.15%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush() uses indio_dev->actiCheck if you run itEPSS 0.17%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 character.Check if you run itEPSS 0.17%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice instruction haCheck if you run itEPSS 0.19%Jul 28, 2025
Sort