Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploitinCheck if you run itEPSS 0.71%Nov 10, 2025
- Low2.7SpiceDB is an open source database system for creating and managing security-critical application permissions.Check if you run itEPSS 0.26%Nov 10, 2025
- Critical9.3Milvus is an open-source vector database built for generative AI applications.Check if you run itEPSS 0.87%Nov 10, 2025
- High8.6Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents.Check if you run itEPSS 0.33%Nov 10, 2025
- High8.6Incus is a system container and virtual machine manager.Check if you run itEPSS 0.18%Nov 10, 2025
- Medium5.0Langfuse is an open source large language model engineering platform.Check if you run itEPSS 0.34%Nov 10, 2025
- High7.5Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.51%Nov 10, 2025
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.45%Nov 10, 2025
- Medium5.5OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.32%Nov 10, 2025
- High8.8Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.24%Nov 10, 2025
- Medium4.2Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing vCheck if you run itEPSS 0.17%Nov 10, 2025
- Medium5.3Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentiaCheck if you run itEPSS 0.21%Nov 10, 2025
- Medium5.5Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from prCheck if you run itEPSS 0.09%Nov 10, 2025
- Medium5.9Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive informCheck if you run itEPSS 0.17%Nov 10, 2025
- Medium5.3IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages.Check if you run itEPSS 0.25%Nov 10, 2025
- Medium5.9Dell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability.Check if you run itEPSS 0.19%Nov 10, 2025
- High7.3Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer.Check if you run itEPSS 0.15%Nov 10, 2025
- Medium4.2In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race conditionCheck if you run itEPSS 0.10%Nov 10, 2025
- High8.4In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalationCheck if you run itEPSS 0.09%Nov 10, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers.Open the advisoryNov 10, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers.Open the advisoryNov 10, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers.Open the advisoryNov 10, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was fixed before public disclosure and did not affect any released versions.Open the advisoryNov 10, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was fixed before public disclosure and did not affect any released versions.Open the advisoryNov 10, 2025
- High8.1In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosureCheck if you run itEPSS 0.24%Nov 10, 2025
Sort