Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event Currently, in ath12k_service_ready_ext_event(),Check if you run itEPSS 0.15%Sep 24, 2025
- Medium5.3The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critCheck if you run itEPSS 0.38%Sep 24, 2025
- Critical9.8The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.Check if you run itEPSS 0.49%Sep 24, 2025
- Medium4.3Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Sep 24, 2025
- High7.8Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.30%Sep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- UnknownNot usedOpen the advisorySep 24, 2025
- Medium5.3A Insufficient Session Expiration vulnerability in the Liferay Portal 7.4.3.121 through 7.3.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.QCheck if you run itEPSS 0.18%Sep 24, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 allowsCheck if you run itEPSS 0.23%Sep 24, 2025
- Medium6.4nncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in packet data.Check if you run itEPSS 0.27%Sep 24, 2025
- High7.6Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions.Check if you run itEPSS 0.28%Sep 24, 2025
- Medium6.5A vulnerability exists in the 'counterpart' library for Node.js and the browser due to insufficient sanitization of user-controlled input in translation key processing.Check if you run itEPSS 0.48%Sep 24, 2025
- Medium5.3A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method.Check if you run itEPSS 0.36%Sep 24, 2025
- Medium6.5A prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation of user-provided keys in the assign function allows attackeCheck if you run itEPSS 0.43%Sep 24, 2025
- High7.5The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message kCheck if you run itEPSS 0.40%Sep 24, 2025
- Medium6.5The node-cube package (prior to version 5.0.0) contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into tCheck if you run itEPSS 0.41%Sep 24, 2025
- Critical9.8A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, which fails to properly sanitize user-supplieCheck if you run itEPSS 0.54%Sep 24, 2025
- High7.5The web3-core-subscriptions is a package designed to manages web3 subscriptions.Check if you run itEPSS 0.39%Sep 24, 2025
Sort