Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services.Check if you run itEPSS 0.37%Apr 15, 2025
- Medium4.9In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server.Check if you run itEPSS 0.23%Apr 15, 2025
- Low2.1HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium5.6HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.Check if you run itEPSS 0.30%Apr 15, 2025
- Medium4.8HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.Check if you run itEPSS 0.23%Apr 15, 2025
- High8.5A denial-of-service vulnerability exists in the Rockwell Automation ThinManager.Check if you run itEPSS 1.78%Apr 15, 2025
- High8.5A privilege escalation vulnerability exists in the Rockwell Automation ThinManager.Check if you run itEPSS 0.30%Apr 15, 2025
- High7.3BleachBit cleans files to free disk space and to maintain privacy.Check if you run itEPSS 0.24%Apr 15, 2025
- Medium6.5E.D.D.I (Enhanced Dialog Driven Interface) is a middleware to connect and manage LLM API bots.Check if you run itEPSS 1.27%Apr 15, 2025
- Medium5.5OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux.Check if you run itEPSS 0.19%Apr 15, 2025
- Medium5.7Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.91%Apr 15, 2025
- Critical9.0A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function.Check if you run itEPSS 0.97%Apr 15, 2025
- Medium6.3Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists.Check if you run itEPSS 0.46%Apr 15, 2025
- Medium5.2Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”.Check if you run itEPSS 0.15%Apr 15, 2025
- Medium6.4When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium6.3By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwardCheck if you run itEPSS 0.36%Apr 15, 2025
- Medium6.5This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.Check if you run itEPSS 0.57%Apr 15, 2025
- High7.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF).Check if you run itEPSS 0.60%Apr 15, 2025
- High7.5This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPuCheck if you run itEPSS 0.76%Apr 15, 2025
- Medium5.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium6.5A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium4.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.5The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner.Check if you run itEPSS 0.59%Apr 15, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.TCheck if you run itEPSS 0.24%Apr 15, 2025
Sort