Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4.Check if you run itEPSS 0.30%Jul 3, 2025
- Medium4.8A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2.Check if you run itEPSS 0.72%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for zero-length skcipherCheck if you run itEPSS 0.19%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails in one clock domain of an NI devCheck if you run itEPSS 0.17%Jul 3, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting of the subrequest iteratCheck if you run itEPSS 0.45%Jul 3, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might haveCheck if you run itEPSS 0.46%Jul 3, 2025
- Medium5.8In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.Check if you run itEPSS 0.40%Jul 3, 2025
- Medium6.1An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the backup management API.Check if you run itEPSS 2.24%Jul 2, 2025
- High8.5Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover.Check if you run itEPSS 0.23%Jul 2, 2025
- Medium6.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.38%Jul 2, 2025
- Critical10.0An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54.Check if you run itEPSS 5.47%Jul 2, 2025
- Critical9.3A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server via automatic link unfurling.Check if you run itEPSS 0.43%Jul 2, 2025
- High8.8Graylog is a free and open log management platform.Check if you run itEPSS 0.61%Jul 2, 2025
- High7.5A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.Check if you run itEPSS 0.59%Jul 2, 2025
- Low2.0Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resourceCheck if you run itEPSS 0.54%Jul 2, 2025
- Low3.3The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the MobiCheck if you run itEPSS 0.14%Jul 2, 2025
- Low2.1Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and earlier.Check if you run itEPSS 0.15%Jul 2, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 10.15%Jul 2, 2025
- Medium5.5Sentry is a developer-first error tracking and performance monitoring tool.Check if you run itEPSS 0.80%Jul 1, 2025
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615.Check if you run itEPSS 0.96%Jul 1, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521.Check if you run itEPSS 0.96%Jul 1, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615.Check if you run itEPSS 0.96%Jul 1, 2025
- Critical9.7Sunshine is a self-hosted game stream host for Moonlight.Check if you run itEPSS 0.24%Jul 1, 2025
- High8.8Dell OpenManage Network Integration, versions prior to 3.8, contains an Authentication Bypass by Capture-replay vulnerability in the RADIUS protocol.Check if you run itEPSS 0.28%Jun 30, 2025
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.45%Jun 30, 2025
Sort