Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic.Check if you run itEPSS 0.35%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 0.96%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 0.96%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 0.96%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 0.99%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 2.25%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 2.41%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 2.25%May 5, 2025
- Critical9.1OpenCTI is an open cyber threat intelligence (CTI) platform.Check if you run itEPSS 0.84%May 5, 2025
- Low1.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.38%May 5, 2025
- High7.3BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass.Check if you run itEPSS 0.19%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to caCheck if you run itEPSS 0.38%May 5, 2025
- Medium5.3The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.0 via the 'zetra_deleteLanguageFile' and 'zetra_deleteFontsCheck if you run itEPSS 0.42%May 5, 2025
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.33%May 5, 2025
- None0.0DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryMay 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers tCheck if you run itEPSS 0.20%May 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifiCheck if you run itEPSS 0.20%May 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global functions When processing calls to certain helpers, verifier invCheck if you run itEPSS 0.19%May 5, 2025
- Medium4.3Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user inteCheck if you run itEPSS 0.37%May 5, 2025
- Low2.3Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encCheck if you run itEPSS 0.19%May 5, 2025
- Critical9.1Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, enabling XML External Entity (XXE) resolution in multiple WSOCheck if you run itEPSS 1.29%May 5, 2025
- Medium6.9TOTOLINK a720r_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 14.03%May 5, 2025
- Medium6.9A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical.Check if you run itEPSS 0.59%May 5, 2025
- Medium6.9A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical.Check if you run itEPSS 1.12%May 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issueCheck if you run itEPSS 0.22%May 5, 2025
Sort