Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, enabling XML External Entity (XXE) resolution in multiple WSOCheck if you run itEPSS 1.29%May 5, 2025
- High8.2React Router is a router for React.Check if you run itEPSS 0.80%Apr 25, 2025
- Medium4.4ManageWiki is a MediaWiki extension allowing users to manage wikis.Check if you run itEPSS 0.26%Apr 24, 2025
- Low2.9In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order).Check if you run itEPSS 0.41%Apr 23, 2025
- Medium4.3OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.25%Apr 22, 2025
- Critical9.2Local File Inclusion (LFI) vulnerability in a Render function of Formulatrix Rock Maker Web (RMW) allows a remote attacker to obtain sensitive data via arbitrary code execution.Check this weekEPSS 92.00%Apr 21, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusableCheck this weekEPSS 29.00%Apr 18, 2025
- UnknownDocuSeal Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDocuSign Print Option Flattened Layer VulnerabilityPatch nowKEVEPSS 0.35%Dec 5, 2024
- UnknownDocumenso Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDropBox Sign Flattened Layer VulnerabilityPatch nowKEVEPSS 0.19%Dec 5, 2024
- UnknownDocuSign SaaS AI Assistant Hidden Content Rendering VulnerabilityPatch nowKEVEPSS 0.28%Dec 5, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityPatch nowKEVEPSS 99.43%Aug 5, 2024
- UnknownWPDeveloper essential_blocks Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 50.67%May 13, 2024
- Unknownzivif pr115-204-p-rs_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 3.88%May 6, 2024
- UnknownGoogle Chrome Pepper Plug-in API (PPAPI) PepperInProcessRouter::SendToHost VulnerabilityPatch nowKEVEPSS 1.45%May 6, 2024
- Unknownsquirrelly squirrelly Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 58.29%Feb 7, 2024
- Unknownpluginus inpost_gallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.62%Nov 13, 2023
- Critical9.6Google Skia Integer Overflow VulnerabilityPatch nowKEVEPSS 16.47%Sep 28, 2023
- Critical9.6Google Chrome Skia Integer Overflow VulnerabilityPatch nowKEVEPSS 5.74%Apr 12, 2023
- UnknownApple ipados Improper Restriction of Rendered UI Layers or FramesPatch nowKEVEPSS 1.44%Dec 13, 2022
- Critical9.6Google Chromium GPU Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 31.86%Nov 22, 2022
- Medium5.5A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/…Check if you run itEPSS 0.79%Sep 9, 2022
- Medium5.5An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '…Check if you run itEPSS 0.78%Sep 9, 2022
- Critical9.6Google Chromium Mojo Insufficient Data Validation VulnerabilityPatch nowKEVEPSS 5.85%Aug 30, 2022