Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 1.32%Jul 7, 2025
- High7.5Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 1.32%Jul 7, 2025
- High7.5MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data.Check if you run itEPSS 0.36%Jul 7, 2025
- High7.7An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDCheck if you run itEPSS 0.47%Jul 7, 2025
- Medium6.5MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash.Check if you run itEPSS 0.33%Jul 7, 2025
- Medium4.4An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered.Check if you run itEPSS 0.28%Jul 7, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0.Check if you run itEPSS 0.55%Jul 7, 2025
- High8.1A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.Check if you run itEPSS 1.73%Jul 7, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0.Check if you run itEPSS 0.55%Jul 7, 2025
- Medium6.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XCheck if you run itEPSS 0.21%Jul 7, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0.Check if you run itEPSS 0.55%Jul 7, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical.Check if you run itEPSS 0.55%Jul 7, 2025
- Medium6.9A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical.Check if you run itEPSS 0.55%Jul 7, 2025
- High7.5A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0.12.40, specifically within the function in .Check if you run itEPSS 0.62%Jul 7, 2025
- Medium5.1A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.46%Jul 7, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium5.3A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium5.3A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium5.1A vulnerability was found in Campcodes Complaint Management System 1.0.Check if you run itEPSS 0.46%Jul 7, 2025
- High8.0An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers.Check if you run itEPSS 0.40%Jul 7, 2025
- Medium6.5The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing.Check if you run itEPSS 0.39%Jul 7, 2025
- Medium6.2A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal.Check if you run itEPSS 0.33%Jul 7, 2025
- Low3.5Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the file.Check if you run itEPSS 0.41%Jul 7, 2025
- Critical9.8langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions.Check if you run itEPSS 0.83%Jul 7, 2025
- High7.5The parisneo/lollms repository is affected by a timing attack vulnerability in the function within the file.Check if you run itEPSS 0.41%Jul 7, 2025
Sort