Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- High8.9A weakness has been identified in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.97%Dec 22, 2025
- High7.5An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06.Check if you run itEPSS 0.43%Dec 22, 2025
- Critical9.8Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitiCheck if you run itEPSS 0.74%Dec 22, 2025
- High8.6LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation.Check if you run itEPSS 0.41%Dec 19, 2025
- High8.5Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation.Check if you run itEPSS 0.59%Dec 19, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityPatch nowKEVEPSS 98.99%Dec 19, 2025
- Critical9.3AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid().Check if you run itEPSS 1.48%Dec 19, 2025
- Medium5.3A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing U3D data.Check if you run itEPSS 0.21%Dec 19, 2025
- Medium5.3A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data.Check if you run itEPSS 0.21%Dec 19, 2025
- Medium5.3A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data.Check if you run itEPSS 0.21%Dec 19, 2025
- Medium6.9Cowrie Unrestricted wget/curl Emulation SSRF-Based DDoS AmplificationPatch nowKEVEPSS 0.68%Dec 19, 2025
- High8.7Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-side request forgery (SSRF) vulnerabilities in that allow an aCheck if you run itEPSS 5.44%Dec 18, 2025
- Medium5.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.Check if you run itEPSS 0.22%Dec 18, 2025
- High7.3Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restCheck if you run itEPSS 0.25%Dec 18, 2025
- High8.5Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library.Check if you run itEPSS 0.22%Dec 18, 2025
- Medium5.1TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the folder name parameter.Check if you run itEPSS 0.24%Dec 18, 2025
- High7.5langgenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Dec 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'imm_tq' is initializeCheck if you run itEPSS 0.22%Dec 18, 2025
- High7.2A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file.Check if you run itEPSS 0.40%Dec 18, 2025
- High7.1A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter.Check if you run itEPSS 0.26%Dec 18, 2025
- High7.5A flaw was found in Nodemailer.Check if you run itEPSS 0.60%Dec 18, 2025
- Medium6.5Missing Authorization vulnerability in Anton Vanyukov Offload, AI & Optimize with Cloudflare Images cf-images allows Exploiting Incorrectly Configured Access Control Security LevelCheck this weekEPSS 25.00%Dec 18, 2025
- Medium6.5Missing Authorization vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Exploiting Incorrectly Configured Access ControCheck this weekEPSS 21.00%Dec 18, 2025
- Medium6.5Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official aCheck if you run itEPSS 0.32%Dec 18, 2025
Sort