Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability was found in PyTorch 2.6.0+cu124.Check if you run itEPSS 0.19%May 5, 2025
- Medium6.4league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.38%May 5, 2025
- Critical9.8The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01.Check if you run itEPSS 0.66%May 5, 2025
- High7.3Craft is a content management system.Check if you run itEPSS 1.52%May 5, 2025
- Medium6.8MobSF is a mobile application security testing tool used.Check if you run itEPSS 0.52%May 5, 2025
- Medium5.1A vulnerability was found in Intelbras InControl up to 2.21.59.Check if you run itEPSS 0.53%May 5, 2025
- High7.8Langroid is a framework for building large-language-model-powered applications.Check if you run itEPSS 0.65%May 5, 2025
- Medium5.3HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment.Check if you run itEPSS 0.31%May 5, 2025
- Low3.1Keystone is a content management system for Node.js.Check if you run itEPSS 0.28%May 5, 2025
- Medium5.4HCL BigFix Compliance is affected by an improper or missing SameSite attribute.Check if you run itEPSS 0.24%May 5, 2025
- Medium5.4Misskey is an open source, federated social media platform.Check if you run itEPSS 0.45%May 5, 2025
- High7.2Misskey is an open source, federated social media platform.Check if you run itEPSS 0.25%May 5, 2025
- Medium6.9oretnom23 stock_management_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.66%May 5, 2025
- Low2.1@misskey-dev/summaly is a tool for getting a summary of a web page.Check if you run itEPSS 0.26%May 5, 2025
- High8.6Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.Check if you run itEPSS 0.32%May 5, 2025
- High8.8The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'external_image_replace_get_posts::replace_post'Check if you run itEPSS 0.79%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 1.00%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 1.00%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 0.95%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 0.95%May 5, 2025
- Critical9.0Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-reactCheck if you run itEPSS 0.98%May 5, 2025
- Critical9.8Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.54%May 5, 2025
- Medium6.3Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.28%May 5, 2025
- High8.8Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially explCheck if you run itEPSS 0.43%May 5, 2025
- High8.8Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.44%May 5, 2025
Sort