Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts.Check if you run itEPSS 0.59%Aug 24, 2026
- High8.7RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels.Check if you run itEPSS 0.45%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…Check if you run itEPSS 0.45%Aug 24, 2026
- High8.8A flaw was found in WebKitGTK.Check if you run itEPSS 0.39%Aug 24, 2026
- Critical9.2RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private.Check if you run itEPSS 0.66%Aug 24, 2026
- Critical9.2RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to r…Check if you run itEPSS 0.69%Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.Check if you run itEPSS 0.69%Aug 24, 2026
- High7.0A vulnerability was found in RPM's rpmbuild tarball processing.Check if you run itEPSS 0.20%Aug 24, 2026
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…Check if you run itEPSS 0.49%Aug 24, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- Critical9.3phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an ins…Check if you run itEPSS 0.64%Aug 24, 2026
- High7.8A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5.Check if you run itEPSS 0.17%Aug 24, 2026
- Medium6.5A flaw was found in JSS (Java Security Services).Check if you run itEPSS 0.18%Aug 24, 2026
- High7.1Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the adm…Check if you run itEPSS 0.24%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.23%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.40%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- Medium6.0The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates.Check if you run itEPSS 0.24%Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…Check if you run itEPSS 0.24%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Check if you run itEPSS 0.41%Aug 24, 2026
- Medium5.3The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned…Check if you run itEPSS 0.34%Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.Check if you run itEPSS 0.66%Aug 24, 2026
- Low2.1A flaw has been found in Open5GS up to 2.8.0.Check if you run itEPSS 0.53%Aug 24, 2026
- High8.8ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.47%Aug 24, 2026
Sort