Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of theCheck if you run itEPSS 0.86%Jan 21, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_recv_errqueue skbuff_fclone_cache was created withou…Check if you run itEPSS 0.19%Jan 21, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityPatch nowKEVEPSS 98.98%Jan 21, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Unknownla-studioweb element_kit_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 1.11%Jan 21, 2026
- Unknownkodezen academy_lms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.41%Jan 21, 2026
- UnknownThe imaplib module, when passed a user-controlled command, can have additional commands injected using newlines.Check if you run itEPSS 0.43%Jan 20, 2026
- UnknownZyxel vmg4325-b10a_firmware Improper AuthenticationPatch nowKEVEPSS 14.38%Jan 20, 2026
- UnknownExposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 0.79%Jan 20, 2026
- UnknownTP-Link tl-wr845n_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.15%Jan 20, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityCheck if you run itEPSS 0.31%Jan 16, 2026
- Medium6.7Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application.Check if you run itEPSS 0.48%Jan 15, 2026
- Critical9.3GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbitrary YAML configuration and execute PHP code through the scheduler endpoint.Check if you run itEPSS 2.20%Jan 15, 2026
- Medium5.1Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter.Check this weekEPSS 27.00%Jan 15, 2026
- High8.5Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.23%Jan 15, 2026
- High8.5Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.24%Jan 15, 2026
- Medium6.9b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication.Check this weekEPSS 17.00%Jan 15, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.82%Jan 15, 2026
- High8.5Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges.Check if you run itEPSS 0.23%Jan 15, 2026
- Medium6.8Yenkee Hornet Gaming Mouse driver GM312Fltr.sys contains a buffer overrun vulnerability that allows attackers to crash the system by sending oversized input.Check this weekEPSS 47.00%Jan 15, 2026
- High8.5TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges.Check this weekEPSS 25.00%Jan 15, 2026
- Medium6.8Redragon Gaming Mouse driver contains a kernel-level vulnerability that allows attackers to trigger a denial of service by sending malformed IOCTL requests.Check this weekEPSS 49.00%Jan 15, 2026
- High7.0Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution.Check if you run itEPSS 0.91%Jan 15, 2026
- Medium5.3Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript.Check this weekEPSS 32.00%Jan 15, 2026
- High7.1Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries.Check if you run itEPSS 0.46%Jan 15, 2026
Sort