Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message kCheck if you run itEPSS 0.40%Sep 24, 2025
- Medium6.5The node-cube package (prior to version 5.0.0) contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into tCheck if you run itEPSS 0.41%Sep 24, 2025
- Critical9.8A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, which fails to properly sanitize user-supplieCheck if you run itEPSS 0.54%Sep 24, 2025
- High8.8Datart 1.0.0-rc.3 is vulnerable to Directory Traversal.Check if you run itEPSS 1.35%Sep 24, 2025
- High7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityPatch nowKEVEPSS 41.50%Sep 24, 2025
- High8.2An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60.Check if you run itEPSS 0.33%Sep 23, 2025
- High8.2An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60.Check if you run itEPSS 0.35%Sep 23, 2025
- Medium6.9The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC.Check if you run itEPSS 0.26%Sep 23, 2025
- Medium5.0Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, cauCheck if you run itEPSS 0.28%Sep 23, 2025
- Medium6.9Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.Check if you run itEPSS 0.33%Sep 23, 2025
- Medium6.3Http4s is a Scala interface for HTTP services.Check if you run itEPSS 0.37%Sep 23, 2025
- Critical9.1DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.50%Sep 23, 2025
- Medium6.8A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication.Check if you run itEPSS 0.24%Sep 23, 2025
- Medium4.3A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling.Check if you run itEPSS 0.21%Sep 23, 2025
- Medium6.8An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service.Check if you run itEPSS 0.69%Sep 23, 2025
- Medium4.8An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in thCheck if you run itEPSS 0.19%Sep 23, 2025
- High7.3Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518Check if you run itEPSS 0.36%Sep 23, 2025
- Critical10.0A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.Check if you run itEPSS 1.11%Sep 23, 2025
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc.Check if you run itEPSS 1.11%Sep 23, 2025
- Medium5.3A vulnerability was identified in Campcodes Society Membership Information System 1.0.Check if you run itEPSS 0.39%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() A crash was observed with the following output: BUG: kCheck if you run itEPSS 0.13%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() Currently, calling bpf_map_kmalloc_node() fCheck if you run itEPSS 0.15%Sep 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure tests,Check if you run itEPSS 0.16%Sep 23, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1_info There is a place where generic code in messenger.c is rCheck if you run itEPSS 0.33%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ceph: always call ceph_shift_unused_folios_left() The function ceph_process_folio_batch() sets folio_batch entriCheck if you run itEPSS 0.19%Sep 23, 2025
Sort