Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Dragonfly is an open source P2P-based file distribution and image acceleration system.Check if you run itEPSS 0.23%Sep 17, 2025
- Medium6.9Dragonfly is an open source P2P-based file distribution and image acceleration system.Check if you run itEPSS 0.73%Sep 17, 2025
- Medium5.5Dragonfly is an open source P2P-based file distribution and image acceleration system.Check if you run itEPSS 0.25%Sep 17, 2025
- High7.7Dragonfly is an open source P2P-based file distribution and image acceleration system.Check if you run itEPSS 0.38%Sep 17, 2025
- High7.2The Scratch Channel is a news website.Check if you run itEPSS 0.29%Sep 17, 2025
- Low3.1Nuxt is an open-source web development framework for Vue.js.Check if you run itEPSS 0.37%Sep 17, 2025
- High7.7esm.sh is a nobuild content delivery network(CDN) for modern web development.Check if you run itEPSS 1.64%Sep 17, 2025
- Medium6.1Server-Side Request Forgery (SSRF) vulnerability in Ghost allows an attacker to access internal resources.This issue affects Ghost: from 6.0.0 through 6.0.8, from 5.99.0 through 5.Check if you run itEPSS 0.52%Sep 17, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework scratch handling for READ_PLUS (again) I found that the read code might send multiple requests uCheck if you run itEPSS 0.41%Sep 17, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: dmaengine: hisilicon: Add multi-thread support for a DMA channel When we get a DMA channel and try to use it inCheck if you run itEPSS 0.21%Sep 17, 2025
- Medium5.4The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.13%Sep 17, 2025
- Medium4.3The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.20%Sep 17, 2025
- Medium4.3The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0.Check if you run itEPSS 0.17%Sep 17, 2025
- Critical9.8A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request.Check if you run itEPSS 3.46%Sep 17, 2025
- Medium6.5WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality.Check if you run itEPSS 0.41%Sep 17, 2025
- Medium4.0Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP POST request with an empty HTTPCheck if you run itEPSS 0.21%Sep 17, 2025
- Medium6.3A Cross-Site Request Forgery (CSRF) vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration (ZCS) when the zimbraFeatureResetPasswordStatus attribute isCheck if you run itEPSS 0.18%Sep 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() When linktype is unknown or kzalloc failed in cfctrl_linkup_reqCheck if you run itEPSS 0.15%Sep 16, 2025
- Medium6.9Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 throughCheck if you run itEPSS 0.40%Sep 16, 2025
- Critical9.3osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php).Check if you run itEPSS 1.60%Sep 16, 2025
- Critical9.3A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1.Check if you run itEPSS 1.69%Sep 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in tCheck if you run itEPSS 0.17%Sep 16, 2025
- High8.8The Sparkle framework includes a helper tool Autoupdate.Check if you run itEPSS 0.20%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for bCheck if you run itEPSS 0.15%Sep 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write During the sysfs firmware write procCheck if you run itEPSS 0.16%Sep 16, 2025
Sort