Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests.Check if you run itEPSS 2.71%Aug 6, 2025
- Critical9.8NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specially crafted inputs.Check if you run itEPSS 1.89%Aug 6, 2025
- Medium5.3A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the function.Check if you run itEPSS 0.42%Aug 6, 2025
- Medium6.5CWE-284: Improper Access ControlCheck if you run itEPSS 0.25%Aug 6, 2025
- High7.5CWE-204: Observable Response DiscrepancyCheck if you run itEPSS 0.34%Aug 6, 2025
- Medium6.5CWE-620: Unverified Password ChangeCheck if you run itEPSS 0.25%Aug 6, 2025
- Medium4.3CWE-200 Exposure of Sensitive Information to an Unauthorized ActorCheck if you run itEPSS 0.25%Aug 6, 2025
- High8.8CWE-639 Authorization Bypass Through User-Controlled KeyCheck if you run itEPSS 0.36%Aug 6, 2025
- High8.8CWE-639 Authorization Bypass Through User-Controlled KeyCheck if you run itEPSS 0.36%Aug 6, 2025
- Medium6.5Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set to true and a user had multiple CNs that are equal but withCheck if you run itEPSS 0.53%Aug 6, 2025
- Critical9.3CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded.Check if you run itEPSS 0.78%Aug 6, 2025
- Medium6.9OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1.Check if you run itEPSS 1.04%Aug 6, 2025
- Low3.7A flaw was found in CIRCL's implementation of the FourQ elliptic curve.Check if you run itEPSS 0.53%Aug 6, 2025
- Medium5.1A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.Check if you run itEPSS 0.23%Aug 6, 2025
- High7.5Information disclosure while accessing and modifying the PIB file of a remote device via powerline.Check if you run itEPSS 0.20%Aug 6, 2025
- High7.8Memory corruption while processing simultaneous requests via escape path.Check if you run itEPSS 0.07%Aug 6, 2025
- High7.8Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.Check if you run itEPSS 0.09%Aug 6, 2025
- High7.5Transient DOS while creating NDP instance.Check if you run itEPSS 0.24%Aug 6, 2025
- Medium5.5Information disclosure while processing a packet at EAVB BE side with invalid header length.Check if you run itEPSS 0.09%Aug 6, 2025
- High7.3Memory corruption while processing specific files in Powerline Communication Firmware.Check if you run itEPSS 0.20%Aug 6, 2025
- High7.8Memory corruption while processing DDI command calls.Check if you run itEPSS 0.09%Aug 6, 2025
- High7.8Memory corruption while processing an IOCTL command with an arbitrary address.Check if you run itEPSS 0.09%Aug 6, 2025
- High7.8Memory corruption while processing DDI call with invalid buffer.Check if you run itEPSS 0.09%Aug 6, 2025
- High7.5Transient DOS while processing an ANQP message.Check if you run itEPSS 0.31%Aug 6, 2025
- High7.5Transient DOS while processing a frame with malformed shared-key descriptor.Check if you run itEPSS 0.24%Aug 6, 2025
Sort