Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).Check if you run itEPSS 0.41%Sep 25, 2025
- Medium5.3pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.Check if you run itEPSS 0.42%Sep 25, 2025
- High7.5An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.Check if you run itEPSS 0.42%Sep 25, 2025
- High7.5An issue was discovered in Stormshield Network Security (SNS) before 5.0.1.Check if you run itEPSS 0.34%Sep 25, 2025
- Medium5.3PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.DropCheck if you run itEPSS 0.42%Sep 25, 2025
- Medium5.3In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.Check if you run itEPSS 0.45%Sep 25, 2025
- Medium5.3In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.Check if you run itEPSS 0.39%Sep 25, 2025
- Medium5.3In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.Check if you run itEPSS 0.36%Sep 25, 2025
- Medium5.3In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.Check if you run itEPSS 0.40%Sep 25, 2025
- Medium6.5An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive iCheck if you run itEPSS 0.53%Sep 25, 2025
- Medium6.1Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/petCheck if you run itEPSS 0.38%Sep 25, 2025
- Medium6.5An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpointCheck if you run itEPSS 0.43%Sep 25, 2025
- High7.5A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.Check if you run itEPSS 0.39%Sep 25, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- UnknownLumis lumis_experience_platform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.81%Sep 25, 2025
- High7.3Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.37%Sep 24, 2025
- High7.3TOTOLINK x6000r_firmware Improper Input ValidationPatch nowKEVEPSS 0.85%Sep 24, 2025
- High7.7Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.29%Sep 24, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: tCheck this weekEPSS 13.46%Sep 24, 2025
- Medium4.8Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.24%Sep 24, 2025
- High7.5Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.43%Sep 24, 2025
- Medium5.3A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attaCheck if you run itEPSS 0.34%Sep 24, 2025
- Medium5.3A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacCheck if you run itEPSS 0.20%Sep 24, 2025
- Medium6.1A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS)Check if you run itEPSS 0.34%Sep 24, 2025
Sort