Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005Check if you run itEPSS 0.35%Nov 12, 2025
- Medium5.3A vulnerability was identified in Campcodes School Fees Payment Management System 1.0.Check if you run itEPSS 0.35%Nov 12, 2025
- High7.5Ceph is a distributed object, block, and file storage platform.Check if you run itEPSS 0.48%Nov 12, 2025
- Medium5.3Mintty is a terminal emulator for Cygwin, MSYS, and WSL.Check if you run itEPSS 0.31%Nov 12, 2025
- Medium5.3Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability.Check if you run itEPSS 0.26%Nov 12, 2025
- Low3.5In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privilegCheck if you run itEPSS 0.30%Nov 12, 2025
- Medium6.1In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker cCheck if you run itEPSS 0.25%Nov 12, 2025
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 12, 2025
- Medium5.9If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g.Check if you run itEPSS 0.56%Nov 12, 2025
- High8.8A flaw was found in the Observability Operator.Check if you run itEPSS 0.35%Nov 12, 2025
- High8.6If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the reqCheck if you run itEPSS 0.49%Nov 12, 2025
- High7.8A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability.Check if you run itEPSS 0.17%Nov 12, 2025
- High7.8A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.18%Nov 12, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affectCheck if you run itEPSS 0.28%Nov 12, 2025
- Critical10.0The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserializationCheck if you run itEPSS 0.63%Nov 12, 2025
- Critical9.4N-central < 2025.4 is vulnerable to authentication bypass via path traversalCheck if you run itEPSS 0.60%Nov 12, 2025
- High8.4N-able N-central Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 31.68%Nov 12, 2025
- Medium6.9N-able N-central Improper Validation of Specified Quantity in InputPatch nowKEVEPSS 37.39%Nov 12, 2025
- High7.3CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured.Check if you run itEPSS 0.13%Nov 12, 2025
- Medium6.9CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by perfCheck if you run itEPSS 0.45%Nov 12, 2025
- High7.3CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the locCheck if you run itEPSS 0.14%Nov 12, 2025
- Medium5.3A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter.Check if you run itEPSS 0.15%Nov 12, 2025
- High8.2Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 beforCheck if you run itEPSS 0.36%Nov 12, 2025
- High7.2The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficientCheck if you run itEPSS 0.39%Nov 12, 2025
- Medium6.5The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eos_scfm_duplicate_post_as_draft() fCheck if you run itEPSS 0.34%Nov 12, 2025
Sort