Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued.Check if you run itEPSS 0.18%Aug 28, 2025
- Medium5.3A flaw has been found in Comfast CF-N1 2.6.0.Check if you run itEPSS 4.83%Aug 28, 2025
- Medium5.3A vulnerability was detected in Comfast CF-N1 2.6.0.Check if you run itEPSS 4.83%Aug 28, 2025
- Medium5.3A security vulnerability has been detected in LB-LINK BL-X26 1.2.8.Check if you run itEPSS 5.55%Aug 28, 2025
- Medium5.3A weakness has been identified in LB-LINK BL-X26 1.2.8.Check if you run itEPSS 5.71%Aug 28, 2025
- Low2.0A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0.Check if you run itEPSS 0.22%Aug 28, 2025
- Medium5.1AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability.Check if you run itEPSS 0.14%Aug 28, 2025
- Low2.0A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688.Check if you run itEPSS 0.23%Aug 28, 2025
- Medium5.3A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 6.94%Aug 28, 2025
- Medium4.4Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of ServiceCheck if you run itEPSS 0.13%Aug 28, 2025
- Critical9.1Valtimo is a platform for Business Process Automation.Check if you run itEPSS 0.40%Aug 28, 2025
- Medium5.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.38%Aug 28, 2025
- Medium5.4A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload proCheck if you run itEPSS 0.21%Aug 28, 2025
- Medium5.3HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.Check if you run itEPSS 0.10%Aug 28, 2025
- Medium6.5HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access tCheck if you run itEPSS 0.09%Aug 28, 2025
- Medium5.5In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 informationCheck if you run itEPSS 0.22%Aug 28, 2025
- High8.1In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselvesCheck if you run itEPSS 0.29%Aug 28, 2025
- Medium4.3Contao is an Open Source CMS.Check if you run itEPSS 0.26%Aug 28, 2025
- Medium4.3Contao is an Open Source CMS.Check if you run itEPSS 0.26%Aug 28, 2025
- Medium5.3Contao is an Open Source CMS.Check if you run itEPSS 0.32%Aug 28, 2025
- Medium5.3Contao is an Open Source CMS.Check if you run itEPSS 0.30%Aug 28, 2025
- Medium6.5Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to access all Kibana Spaces.Check if you run itEPSS 0.28%Aug 28, 2025
- High8.7Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface.Check if you run itEPSS 1.75%Aug 28, 2025
- High7.5Asterisk is an open source private branch exchange and telephony toolkit.Check if you run itEPSS 0.43%Aug 28, 2025
- Medium6.9lychee link checking action checks links in Markdown, HTML, and text files using lychee.Check if you run itEPSS 0.37%Aug 28, 2025
Sort