Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional usCheck if you run itEPSS 0.24%Oct 23, 2025
- Medium6.5CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim toCheck if you run itEPSS 0.34%Oct 23, 2025
- Medium4.3An issue was discovered in BAE SOCET GXP before 4.6.0.2.Check if you run itEPSS 0.24%Oct 23, 2025
- High8.4An issue was discovered in BAE SOCET GXP before 4.6.0.2.Check if you run itEPSS 0.31%Oct 23, 2025
- Medium6.5An issue was discovered in BAE SOCET GXP before 4.6.0.2.Check if you run itEPSS 0.69%Oct 23, 2025
- Medium6.5FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.Check if you run itEPSS 0.26%Oct 23, 2025
- High7.5Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.Check if you run itEPSS 0.36%Oct 23, 2025
- Medium6.5FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.Check if you run itEPSS 0.26%Oct 23, 2025
- Medium6.6pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.44%Oct 22, 2025
- Medium6.6pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.44%Oct 22, 2025
- Medium6.5Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.46%Oct 22, 2025
- Medium5.7OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.33%Oct 22, 2025
- High7.2Admidio is an open-source user management solution.Check if you run itEPSS 0.43%Oct 22, 2025
- High8.7BookLore is a self-hosted web app for organizing and managing personal book collections.Check if you run itEPSS 0.43%Oct 22, 2025
- Medium6.9VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC.Check if you run itEPSS 1.15%Oct 22, 2025
- Medium6.9FastGPT is an AI Agent building platform.Check if you run itEPSS 0.24%Oct 22, 2025
- High8.2aiomysql is a library for accessing a MySQL database from the asyncio.Check if you run itEPSS 0.39%Oct 22, 2025
- Low2.0Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 202Check if you run itEPSS 0.27%Oct 22, 2025
- High8.1Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.38%Oct 22, 2025
- Medium5.7OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.32%Oct 22, 2025
- Medium4.8A reflected cross-site scripting (XSS) vulnerability, resulting from a regression, has been identified in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 throughCheck if you run itEPSS 0.24%Oct 22, 2025
- Medium6.4A container privilege escalation flaw was found in certain AMQ Broker images.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.4Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems.Check if you run itEPSS 0.21%Oct 22, 2025
- Critical9.0Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary acCheck if you run itEPSS 0.33%Oct 22, 2025
- Medium5.1An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service toCheck if you run itEPSS 0.45%Oct 22, 2025
Sort