Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.3An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.18%Dec 11, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.62%Dec 11, 2025
- Medium5.3An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the follCheck this weekEPSS 64.23%Dec 11, 2025
- High7.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 10, 2025
- High7.3LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).Check if you run itEPSS 2.31%Dec 10, 2025
- Critical9.7Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation.Check if you run itEPSS 2.02%Dec 10, 2025
- High8.2Neuron is a PHP framework for creating and orchestrating AI Agents.Check if you run itEPSS 0.29%Dec 10, 2025
- Critical9.4Neuron is a PHP framework for creating and orchestrating AI Agents.Check if you run itEPSS 0.41%Dec 10, 2025
- Medium6.9FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.Check if you run itEPSS 0.27%Dec 10, 2025
- High8.4Okta Java Management SDK facilitates interactions with the Okta management API.Check if you run itEPSS 0.21%Dec 10, 2025
- Medium5.4The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.20%Dec 10, 2025
- High7.5ImageMagick is a software suite to create, edit, compose, or convert bitmap images.Check if you run itEPSS 0.51%Dec 10, 2025
- High8.7XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).Check if you run itEPSS 1.02%Dec 10, 2025
- High8.7XWiki is an open-source wiki software platform.Check if you run itEPSS 0.40%Dec 10, 2025
- Medium5.3Okta Java Management SDK facilitates interactions with the Okta management API.Check if you run itEPSS 0.27%Dec 10, 2025
- Medium6.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.51%Dec 10, 2025
- Medium5.3Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles.Check if you run itEPSS 0.26%Dec 10, 2025
- High8.6PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoinCheck if you run itEPSS 1.10%Dec 10, 2025
- High8.7WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager.Check if you run itEPSS 0.66%Dec 10, 2025
- High8.6Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality.Check if you run itEPSS 1.02%Dec 10, 2025
- High8.7Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality.Check if you run itEPSS 0.94%Dec 10, 2025
- High8.6CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files.Check if you run itEPSS 0.94%Dec 10, 2025
- High8.6appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoiCheck if you run itEPSS 0.95%Dec 10, 2025
- High8.7Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers.Check if you run itEPSS 0.48%Dec 10, 2025
- High7.1Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls.Check if you run itEPSS 0.40%Dec 10, 2025
Sort