Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint ( ) that exposes sensitive information such as the session key, server version, product details, and diCheck if you run itEPSS 0.30%Dec 4, 2025
- Medium6.9Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim'sCheck if you run itEPSS 0.48%Dec 4, 2025
- Critical9.3UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP unserialize()Check if you run itEPSS 0.61%Dec 4, 2025
- High8.8AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device iCheck if you run itEPSS 0.68%Dec 4, 2025
- High8.5perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts.Check if you run itEPSS 0.19%Dec 4, 2025
- High8.7Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that allows unauthenticated attackers to execute arbitrary SQL queriCheck if you run itEPSS 0.41%Dec 4, 2025
- Medium5.3WEBIGniter 28.7.23 contains a cross-site scripting vulnerability in the user creation process that allows unauthenticated attackers to execute malicious JavaScript code, enabling pCheck if you run itEPSS 0.41%Dec 4, 2025
- High8.7dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.Check if you run itEPSS 0.53%Dec 4, 2025
- High8.6The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly.Check if you run itEPSS 0.51%Dec 4, 2025
- Medium4.1Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances.Check if you run itEPSS 0.11%Dec 4, 2025
- High8.1Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certaCheck if you run itEPSS 0.33%Dec 4, 2025
- Medium5.1Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories.Check if you run itEPSS 0.33%Dec 4, 2025
- High8.7A weakness has been identified in H3C Magic B0 up to 100R002.Check if you run itEPSS 0.81%Dec 4, 2025
- Medium4.8A vulnerability was identified in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.28%Dec 4, 2025
- Medium5.1A vulnerability was found in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_register_matrix() isn't called (due to ) in cCheck if you run itEPSS 0.19%Dec 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_fc_delete_assocation() waits for pCheck if you run itEPSS 0.56%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix scx_enable() crash on helper kthread creation failure A crash was observed when the sched_ext selCheck if you run itEPSS 0.17%Dec 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: mptcp: fix a race in mptcp_pm_del_add_timer() mptcp_pm_del_add_timer() can call sk_stop_timer_sync(sk, &entry->aCheck if you run itEPSS 0.46%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added In commit b441cf3f8c4bCheck if you run itEPSS 0.21%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() The ethtool tsconfig Netlink path can trigger aCheck if you run itEPSS 0.19%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: remove never-working support for setting nsh fields The validation of the set(nsh(...)) actionCheck if you run itEPSS 0.24%Dec 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'cCheck if you run itEPSS 0.30%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documenteCheck if you run itEPSS 0.15%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on request_irq() failure The mlx5_irq_alloc() function can inadvertently frCheck if you run itEPSS 0.16%Dec 4, 2025
Sort