Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success DAMON's virtual address space operation set imCheck if you run itEPSS 0.19%Dec 4, 2025
- Low2.0A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.27%Dec 4, 2025
- Medium4.3Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-7280Check if you run itEPSS 0.38%Dec 4, 2025
- Medium4.8A weakness has been identified in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.29%Dec 4, 2025
- Medium5.1A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium6.1Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, pote…Check if you run itEPSS 0.17%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get deleted (from the various listsCheck if you run itEPSS 0.14%Dec 4, 2025
- Medium5.5A flaw was found in ansible-collection-community-general.Check if you run itEPSS 0.19%Dec 4, 2025
- Medium4.8Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling.Check if you run itEPSS 0.26%Dec 4, 2025
- Medium6.5Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint.Check if you run itEPSS 0.30%Dec 4, 2025
- Medium5.3Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism.Check if you run itEPSS 0.35%Dec 4, 2025
- High8.4A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achieve Remote Code Execution (RCE) with rootCheck if you run itEPSS 0.38%Dec 4, 2025
- Medium4.3The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files.Check if you run itEPSS 0.31%Dec 4, 2025
- High7.5A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.Check if you run itEPSS 0.63%Dec 4, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12.Check if you run itEPSS 0.22%Dec 4, 2025
- Critical9.1alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.Check if you run itEPSS 0.95%Dec 4, 2025
- High7.5Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentiaCheck if you run itEPSS 0.26%Dec 4, 2025
- Medium5.7Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator passworCheck if you run itEPSS 0.31%Dec 4, 2025
- High7.5Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.Check if you run itEPSS 0.89%Dec 4, 2025
- High7.3This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control (RBAC) through dual dependency on frontend menu systems and baCheck if you run itEPSS 0.29%Dec 4, 2025
- Critical9.8An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.Check if you run itEPSS 0.50%Dec 4, 2025
- Critical9.8The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.Check if you run itEPSS 0.39%Dec 4, 2025
- Critical9.8An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.Check if you run itEPSS 0.46%Dec 4, 2025
- Critical9.8ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.Check if you run itEPSS 1.98%Dec 4, 2025
- Medium6.4MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it.Check if you run itEPSS 1.48%Dec 3, 2025
Sort