Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3A vulnerability was found in comfyanonymous comfyui 0.3.40.Check this weekEPSS 43.00%Jun 16, 2025
- Medium5.1A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1.Check this weekEPSS 34.00%Jun 16, 2025
- High8.8The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.Check if you run itEPSS 0.53%Jun 11, 2025
- High7.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.51%Jun 10, 2025
- Medium6.3FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents.Check if you run itEPSS 0.45%Jun 9, 2025
- Unknownarc53 docsgpt Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 17.09%Jun 8, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Jun 8, 2025
- Medium4.0Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.39%Jun 6, 2025
- Low2.7A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks.Check if you run itEPSS 0.83%Jun 6, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamil Shafeev «Подсказки» от DaData.ru dadata-ru allows Stored XSS.This issueCheck if you run itEPSS 0.33%Jun 6, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0.Check if you run itEPSS 0.43%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects DyCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium5.3A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.48%Jun 4, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.48%Jun 4, 2025
- Medium6.5PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database curCheck if you run itEPSS 0.35%Jun 4, 2025
- High7.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.Check this weekEPSS 10.00%Jun 3, 2025
- Medium4.8Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.14%Jun 2, 2025
- Medium5.3Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing teamCheck this weekEPSS 31.00%May 29, 2025
- Medium4.8Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one.Check this weekEPSS 15.00%May 29, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally.Check if you run itEPSS 0.18%May 29, 2025
- Critical10.0Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.Check this weekEPSS 40.00%May 29, 2025
- Critical9.8IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamicallyCheck if you run itEPSS 1.03%May 28, 2025
- Critical9.1Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data.Check this weekEPSS 43.00%May 28, 2025
- Medium5.0Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource.Check this weekEPSS 25.00%May 28, 2025
- Medium4.8On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Check if you run itEPSS 0.15%May 27, 2025