Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.66%Dec 9, 2025
- High7.0Some endpoints in vulnerability-lookup that modified application state (e.g.Check if you run itEPSS 0.17%Dec 8, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the __c…Check if you run itEPSS 0.19%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory…Check if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio dri…Check if you run itEPSS 0.18%Dec 6, 2025
- Low2.0A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0.Check if you run itEPSS 0.34%Dec 5, 2025
- Medium6.0When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet.Check if you run itEPSS 0.17%Dec 4, 2025
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Open the advisoryDec 4, 2025
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When we do mlx5e_detach_netdev() we eventually disable…Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix kernel panic on partial unmap of a GPU VA region This commit address a kernel pani…Open the advisoryDec 4, 2025
- High7.4A flaw was found in WebKitGTK.Check if you run itEPSS 0.33%Dec 3, 2025
- High8.5JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent…Check if you run itEPSS 0.19%Dec 2, 2025
- High7.4Cacti is an open source performance and fault management framework.Open the advisoryDec 2, 2025
- Medium5.3Apptainer is an open source container platform.Open the advisoryDec 2, 2025
- Medium4.5SingularityCE and SingularityPRO are open source container platforms.Open the advisoryDec 2, 2025
- Medium4.3The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8.Check if you run itEPSS 0.16%Dec 2, 2025
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Open the advisoryDec 1, 2025
- High8.7OrangeHRM is a comprehensive human resource management (HRM) system.Open the advisoryNov 29, 2025
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 75.20%Nov 27, 2025
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 60.52%Nov 25, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP…Open the advisoryNov 21, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation When btrfs_add_qgroup_relation()…Open the advisoryNov 21, 2025
- High7.7Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setti…Check if you run itEPSS 0.15%Nov 18, 2025
- Medium5.4Stack-based buffer overflow in the SMASH-CLP shell.Open the advisoryNov 18, 2025