Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Horovod Vulnerable to Command InjectionCheck if you run itEPSS 1.12%Mar 20, 2025
- High7.5CVE-2025-27415 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.39%Mar 19, 2025
- Medium4.3A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json.Check if you run itEPSS 0.52%Mar 19, 2025
- UnknownDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004Check if you run itEPSS 0.50%Mar 19, 2025
- High8.7XWiki xwiki Transmission of Private Resources into a New Sphere ('Resource Leak')Patch nowKEVEPSS 0.95%Mar 19, 2025
- High8.6reviewdog/action-setup GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 2.48%Mar 19, 2025
- High8.8geminilabs site_reviews Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.93%Mar 19, 2025
- Medium5.3Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) b…Check this weekEPSS 34.81%Mar 19, 2025
- Critical10.0Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Control…Check if you run itEPSS 1.45%Mar 19, 2025
- Medium5.3Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) befor…Check if you run itEPSS 0.38%Mar 19, 2025
- High7.5Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows…Check if you run itEPSS 0.26%Mar 19, 2025
- Critical9.8synology beestation_os Improper Encoding or Escaping of OutputPatch nowKEVEPSS 1.25%Mar 19, 2025
- UnknownWhatsApp PDF Content Sandbox BypassPatch nowKEVEPSS 0.26%Mar 19, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.88%Mar 19, 2025
- Unknownrevmakx backup_and_staging_by_wp_time_capsule Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 94.14%Mar 19, 2025
- Unknownvicidial vicidial Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 79.27%Mar 19, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 76.80%Mar 19, 2025
- UnknownLiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.40%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.54%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.69%Mar 19, 2025
- UnknownZabbix zabbix Improper Input ValidationPatch nowKEVEPSS 76.62%Mar 19, 2025
- Unknownunitecms unlimited_addons_for_wpbakery_page_builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.48%Mar 19, 2025
- Unknownthemepunch slider_revolution Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.69%Mar 19, 2025
Sort