Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Cal.com is open-source scheduling software.Check if you run itEPSS 0.96%Dec 3, 2025
- Medium6.5An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate.Check if you run itEPSS 0.28%Dec 3, 2025
- Medium5.5Rhino is an open-source implementation of JavaScript written entirely in Java.Check if you run itEPSS 0.27%Dec 3, 2025
- Medium6.3When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.Check if you run itEPSS 0.80%Dec 3, 2025
- Critical9.7DeepChat is a smart assistant uses artificial intelligence.Check if you run itEPSS 0.61%Dec 3, 2025
- Medium5.0Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.17%Dec 3, 2025
- High8.8NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path.Check if you run itEPSS 0.42%Dec 3, 2025
- High7.5NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.Check if you run itEPSS 0.68%Dec 3, 2025
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads.Check if you run itEPSS 0.94%Dec 3, 2025
- Medium6.5Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.53%Dec 3, 2025
- Low2.7In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role tCheck if you run itEPSS 0.35%Dec 3, 2025
- Critical9.3TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc hCheck if you run itEPSS 4.36%Dec 3, 2025
- High8.8Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.20%Dec 3, 2025
- Medium5.3A vulnerability was identified in ProudMuBai GoFilm 1.0.0/1.0.1.Check if you run itEPSS 0.24%Dec 3, 2025
- Medium6.5The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versionCheck if you run itEPSS 0.34%Dec 3, 2025
- Medium4.3The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.40.1.Check if you run itEPSS 0.26%Dec 3, 2025
- Medium5.4The Post SMTP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.1.Check if you run itEPSS 0.28%Dec 3, 2025
- Medium5.3A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm workspaces andCheck if you run itEPSS 0.25%Dec 3, 2025
- High8.8A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell commCheck if you run itEPSS 0.63%Dec 3, 2025
- Medium6.2Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.Check if you run itEPSS 0.15%Dec 3, 2025
- Medium5.3The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on theCheck if you run itEPSS 0.22%Dec 3, 2025
- Medium5.3The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 via upload filenames.Check if you run itEPSS 0.33%Dec 3, 2025
- High7.8WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation.Check if you run itEPSS 0.25%Dec 3, 2025
- High7.7Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature.Check if you run itEPSS 0.28%Dec 3, 2025
- Medium5.1The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege escalation.Check if you run itEPSS 0.17%Dec 3, 2025
Sort