Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.46%Aug 11, 2025
- High8.0Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 0.77%Aug 11, 2025
- Medium6.7A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with anCheck if you run itEPSS 0.57%Aug 11, 2025
- Medium5.1YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint.Check if you run itEPSS 0.23%Aug 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify thereCheck if you run itEPSS 0.16%Aug 11, 2025
- Critical9.4Openfiler v2.x contains a command injection vulnerability in the system.html page.Check if you run itEPSS 3.43%Aug 11, 2025
- Critical9.4ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi.Check if you run itEPSS 3.42%Aug 11, 2025
- Critical9.3Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php.Check if you run itEPSS 1.65%Aug 11, 2025
- Critical9.3PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php.Check if you run itEPSS 1.71%Aug 11, 2025
- Medium5.3A vulnerability was identified in code-projects eBlog Site 1.0.Check if you run itEPSS 0.35%Aug 11, 2025
- Medium4.1The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs.Check if you run itEPSS 0.16%Aug 11, 2025
- Medium5.3A vulnerability was identified in WuKongOpenSource WukongCRM 11.0.Check if you run itEPSS 0.38%Aug 11, 2025
- Medium4.8A vulnerability was determined in LibTIFF up to 4.5.1.Check if you run itEPSS 0.19%Aug 11, 2025
- Medium6.8Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logsCheck if you run itEPSS 0.17%Aug 11, 2025
- High7.0YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmissionCheck if you run itEPSS 0.24%Aug 11, 2025
- Medium5.1A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1.Check if you run itEPSS 0.35%Aug 11, 2025
- High7.0YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations.Check if you run itEPSS 0.34%Aug 11, 2025
- Medium4.8A vulnerability has been found in NASM Netwide Assember 2.17rc0.Check if you run itEPSS 0.29%Aug 11, 2025
- Medium4.8MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle.Check if you run itEPSS 0.34%Aug 11, 2025
- Medium4.8A vulnerability was identified in NASM Netwide Assember 2.17rc0.Check if you run itEPSS 0.29%Aug 11, 2025
- Medium4.8A vulnerability was determined in NASM Netwide Assember 2.17rc0.Check if you run itEPSS 0.27%Aug 11, 2025
- Medium4.8A vulnerability was found in NASM Netwide Assember 2.17rc0.Check if you run itEPSS 0.27%Aug 11, 2025
- Medium4.8A vulnerability has been found in NASM Netwide Assember 2.17rc0.Check if you run itEPSS 0.24%Aug 11, 2025
- Medium5.3A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0.Check if you run itEPSS 0.32%Aug 11, 2025
- Medium5.3A vulnerability was determined in jshERP up to 3.5.Check if you run itEPSS 0.46%Aug 11, 2025
Sort