Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1.Check if you run itEPSS 0.41%Sep 15, 2025
- Medium6.9A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6.Check if you run itEPSS 0.84%Sep 15, 2025
- None0.0DO NOT USE THIS CANDIDATE NUMBER.Open the advisorySep 15, 2025
- Medium4.8Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 andCheck if you run itEPSS 0.22%Sep 15, 2025
- Medium6.9hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants.Check if you run itEPSS 0.36%Sep 15, 2025
- Medium5.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.24%Sep 15, 2025
- Medium5.3drawnix is an all in one open-source whiteboard tool.Check if you run itEPSS 0.46%Sep 15, 2025
- Medium5.3A vulnerability was detected in ZKEACMS 4.3.Check if you run itEPSS 0.31%Sep 15, 2025
- High8.5Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution.Check if you run itEPSS 0.20%Sep 15, 2025
- Low2.3Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA tCheck if you run itEPSS 0.32%Sep 15, 2025
- High8.7Dataease is an open source data analytics and visualization platform.Check if you run itEPSS 0.83%Sep 15, 2025
- High7.8The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijCheck if you run itEPSS 0.12%Sep 15, 2025
- High8.7Dataease is an open-source data visualization and analysis platform.Check if you run itEPSS 1.43%Sep 15, 2025
- High7.1Dataease is an open source data analytics and visualization platform.Check if you run itEPSS 0.70%Sep 15, 2025
- Medium6.9Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35,Check if you run itEPSS 0.40%Sep 15, 2025
- Medium4.0IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.Check if you run itEPSS 0.13%Sep 15, 2025
- High7.1Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security.Check if you run itEPSS 0.34%Sep 15, 2025
- Medium6.9A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 15, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0() calls pci_get_domain_bus_and_sCheck if you run itEPSS 0.16%Sep 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add null pointer check to attr_load_runs_vcn Some metadata files are handled before MFT.Check if you run itEPSS 0.16%Sep 15, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: 9p: set req refcount to zero to avoid uninitialized usage When a new request is allocated, the refcount will beCheck if you run itEPSS 0.38%Sep 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() Syzkaller reports a null-ptr-deref bug as follows: ====Check if you run itEPSS 0.16%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found recently by syzbCheck if you run itEPSS 0.17%Sep 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: video/aperture: Call sysfb_disable() before removing PCI devices Call sysfb_disable() from aperture_remove_conflCheck if you run itEPSS 0.14%Sep 15, 2025
Sort