Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications.Check if you run itEPSS 0.42%Jul 10, 2025
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.59%Jul 10, 2025
- Medium6.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.52%Jul 10, 2025
- High8.7Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.Check if you run itEPSS 0.51%Jul 10, 2025
- High8.7Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.Check if you run itEPSS 0.53%Jul 10, 2025
- High8.8Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.Check if you run itEPSS 0.82%Jul 10, 2025
- High8.9llama.cpp is an inference of several LLM models in C/C++.Check if you run itEPSS 0.36%Jul 10, 2025
- Medium5.3A vulnerability was found in code-projects Library System 1.0.Check if you run itEPSS 0.39%Jul 10, 2025
- Critical9.3An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint.Check if you run itEPSS 6.22%Jul 10, 2025
- High8.6An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives.Check if you run itEPSS 1.72%Jul 10, 2025
- High7.1A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposedCheck if you run itEPSS 1.27%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, in the /rest/action API endpoint exposed by the console compoCheck if you run itEPSS 4.36%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption isCheck if you run itEPSS 1.64%Jul 10, 2025
- Medium6.9Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user inputCheck if you run itEPSS 0.36%Jul 10, 2025
- Medium6.9A vulnerability was found in code-projects LifeStyle Store 1.0.Check if you run itEPSS 0.49%Jul 10, 2025
- Medium6.5Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.Check if you run itEPSS 0.55%Jul 10, 2025
- High7.4Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.Check if you run itEPSS 0.28%Jul 10, 2025
- Medium6.5A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().Check if you run itEPSS 0.77%Jul 10, 2025
- Medium5.1A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic.Check if you run itEPSS 0.29%Jul 10, 2025
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.27%Jul 10, 2025
- Low2.1NETGEAR d6400_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.13%Jul 10, 2025
- Medium6.8IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content.Check if you run itEPSS 0.33%Jul 10, 2025
- Medium6.8IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker toCheck if you run itEPSS 0.33%Jul 10, 2025
- Medium4.3IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gatherCheck if you run itEPSS 0.32%Jul 10, 2025
- Medium5.3IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.Check if you run itEPSS 0.34%Jul 10, 2025
Sort