Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includingCheck if you run itEPSS 0.30%Oct 18, 2025
- Critical9.8pyquokka is a framework for making data lakes work for time series.Check if you run itEPSS 0.89%Oct 17, 2025
- Medium6.3yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content.Check if you run itEPSS 0.11%Oct 17, 2025
- Medium6.9ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature.Check if you run itEPSS 1.82%Oct 17, 2025
- Medium6.2ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerabCheck if you run itEPSS 0.38%Oct 17, 2025
- Medium5.3A weakness has been identified in Shenzhen Ruiming Technology Streamax Crocus 1.3.40.Check if you run itEPSS 0.50%Oct 17, 2025
- Low3.0LobeChat is an open source chat application platform.Check if you run itEPSS 0.32%Oct 17, 2025
- Critical10.0Squid is a caching proxy for the Web.Check this weekEPSS 63.36%Oct 17, 2025
- High7.5OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.69%Oct 17, 2025
- Critical9.4Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications.Check if you run itEPSS 0.27%Oct 17, 2025
- High8.6Git LFS is a Git extension for versioning large files.Check if you run itEPSS 1.05%Oct 17, 2025
- Critical9.8Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file coCheck if you run itEPSS 0.75%Oct 17, 2025
- Critical9.8Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability.Check if you run itEPSS 1.42%Oct 17, 2025
- Medium4.3The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0.Check if you run itEPSS 0.27%Oct 17, 2025
- Medium6.4Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versionCheck if you run itEPSS 1.13%Oct 17, 2025
- Critical9.2Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verificatioCheck if you run itEPSS 0.67%Oct 17, 2025
- Critical9.3An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers.Check if you run itEPSS 0.52%Oct 17, 2025
- Medium5.3An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers.Check if you run itEPSS 0.58%Oct 17, 2025
- Critical9.3An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers.Check if you run itEPSS 0.66%Oct 17, 2025
- High8.7An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers.Check if you run itEPSS 0.51%Oct 17, 2025
- Critical9.9The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entiCheck if you run itEPSS 0.72%Oct 17, 2025
- Low3.4The Restaurant Brands International (RBI) assistant platform through 2025-09-06 transmits passwords of user accounts in cleartext e-mail messages.Check if you run itEPSS 0.32%Oct 17, 2025
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 36.87%Oct 17, 2025
- Medium6.5Envoy is an open source edge and service proxy.Check if you run itEPSS 0.42%Oct 16, 2025
- Medium6.9A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10.Check if you run itEPSS 0.46%Oct 16, 2025
Sort