Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function.Check if you run itEPSS 0.40%Nov 10, 2025
- Critical9.3skittles employee_records_system Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.42%Nov 10, 2025
- High8.7rainbowfishsoftware pacsone_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.99%Nov 10, 2025
- Medium5.3A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15.Check if you run itEPSS 0.60%Nov 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: Fix blocked task Revert commit 1afa70632c39 ("serial: qcom-geni: Enable PM runtime for serialCheck if you run itEPSS 0.18%Nov 9, 2025
- Medium5.3A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0.Check if you run itEPSS 5.06%Nov 8, 2025
- High7.1A vulnerability was found in 70mai X200 up to 20251019.Check if you run itEPSS 0.46%Nov 8, 2025
- High7.2The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the process_contact_attribute_import function in all versions up tCheck if you run itEPSS 0.56%Nov 8, 2025
- High7.2The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deCheck if you run itEPSS 0.56%Nov 8, 2025
- High8.8The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 1.7.7.Check if you run itEPSS 0.54%Nov 8, 2025
- Medium4.9The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to SQL Injection via the 'post_types' parameter in all versions up to, and inCheck if you run itEPSS 0.33%Nov 8, 2025
- Medium5.3The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, andCheck if you run itEPSS 0.26%Nov 8, 2025
- High7.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 7.23%Nov 8, 2025
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.37%Nov 8, 2025
- High8.3SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.36%Nov 8, 2025
- Medium6.2Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs.Check if you run itEPSS 0.15%Nov 7, 2025
- Medium5.4Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML pCheck if you run itEPSS 0.19%Nov 7, 2025
- Medium5.3CVAT is an open source interactive video and image annotation tool for computer vision.Check if you run itEPSS 0.39%Nov 7, 2025
- Medium5.0KubeVirt is a virtual machine management add-on for Kubernetes.Check if you run itEPSS 0.23%Nov 7, 2025
- Medium4.7KubeVirt is a virtual machine management add-on for Kubernetes.Check if you run itEPSS 0.20%Nov 7, 2025
- Low2.7Datasette is an open source multi-tool for exploring and publishing data.Check if you run itEPSS 0.41%Nov 7, 2025
- Medium4.8A weakness has been identified in mruby 3.4.0.Check if you run itEPSS 0.17%Nov 7, 2025
- Medium4.4Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked storage device.Check if you run itEPSS 0.13%Nov 7, 2025
- Medium4.4Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device orCheck if you run itEPSS 0.14%Nov 7, 2025
- High7.4LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).Check if you run itEPSS 0.89%Nov 7, 2025
Sort