Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation.Check if you run itEPSS 0.43%Oct 28, 2025
- Medium6.5Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header.Check if you run itEPSS 0.43%Oct 28, 2025
- Critical9.1Taiga is an open source project management platform.Check if you run itEPSS 1.55%Oct 28, 2025
- High7.2Astro is a web framework that includes an image proxy.Check if you run itEPSS 0.35%Oct 28, 2025
- Medium6.3Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.29%Oct 28, 2025
- High7.5Starlette is a lightweight ASGI framework/toolkit.Check if you run itEPSS 0.80%Oct 28, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the behavior originates from a documentation-published Active Response example script.Open the advisoryOct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function (/var/ipfire/header.pCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Critical9.8Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls.Check if you run itEPSS 0.34%Oct 28, 2025
- High7.8An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc.Check if you run itEPSS 0.34%Oct 28, 2025
- High7.8A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc.Check if you run itEPSS 0.34%Oct 28, 2025
- Medium5.0A flaw was found in Red Hat Openshift AI Service.Check if you run itEPSS 0.25%Oct 28, 2025
- Medium6.0A flaw was found in Keycloak.Check if you run itEPSS 0.14%Oct 28, 2025
- High7.1hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()Check if you run itEPSS 0.19%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to unsigned long to avoid overflow when handlingCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets.Check if you run itEPSS 0.21%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The ns_bpf_qdisc selftest triggers a kernel panic: UnaCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the following sock_addr progCheck if you run itEPSS 0.24%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio->index from pgoff_t to loff_t tCheck if you run itEPSS 0.20%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq() Starting with commit dd26c1a23fd5 ("PCI: rCheck if you run itEPSS 0.18%Oct 28, 2025
Sort