Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer ovCheck if you run itEPSS 0.17%May 16, 2025
- Medium4.5In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.Check if you run itEPSS 0.34%May 16, 2025
- Medium4.5In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.Check if you run itEPSS 0.38%May 16, 2025
- Critical10.0invisioncommunity invisioncommunity Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 84.32%May 16, 2025
- High8.2Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).Check if you run itEPSS 0.18%May 16, 2025
- Medium5.9Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate anyCheck if you run itEPSS 0.30%May 16, 2025
- Medium6.5seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.Check if you run itEPSS 0.26%May 16, 2025
- UnknownCisco ios_xe Double FreePatch nowKEVEPSS 1.63%May 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 4.79%May 16, 2025
- Medium5.3A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615.Check if you run itEPSS 1.22%May 15, 2025
- Medium5.3Zulip is an open-source team chat application.Check if you run itEPSS 0.35%May 15, 2025
- Medium6.9A vulnerability was found in SourceCodester Best Online News Portal 1.0.Check if you run itEPSS 0.60%May 15, 2025
- Medium6.3A vulnerability was found in Meteor up to 3.2.1 and classified as problematic.Check if you run itEPSS 0.92%May 15, 2025
- Medium6.5Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.Check if you run itEPSS 0.23%May 15, 2025
- Medium6.9A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- High7.5Tornado is a Python web framework and asynchronous networking library.Check if you run itEPSS 0.74%May 15, 2025
- Critical9.1Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.54%May 15, 2025
- Medium6.9A vulnerability was found in itsourcecode Placement Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium5.3A vulnerability was found in SourceCodester Student Result Management System 1.0.Check if you run itEPSS 0.65%May 15, 2025
- Medium6.9A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 15, 2025
Sort