Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbCheck if you run itEPSS 0.35%Sep 3, 2025
- Medium5.3LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or commCheck if you run itEPSS 0.33%Sep 3, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- UnknownLinux Kernel Incorrect CalculationPatch nowKEVEPSS 3.64%Sep 3, 2025
- UnknownVMware cloud_foundation Deserialization of Untrusted DataPatch nowKEVEPSS 23.31%Sep 3, 2025
- UnknownCisco RV Series Routers Stack-based Buffer OverflowPatch nowKEVEPSS 80.04%Sep 3, 2025
- High7.5Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.Check if you run itEPSS 0.47%Sep 2, 2025
- Medium6.9A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 2, 2025
- High7.8Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.18%Sep 2, 2025
- High7.8NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.27%Sep 2, 2025
- Medium4.3IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium6.9A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.45%Sep 2, 2025
- Critical9.4The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details.Check if you run itEPSS 0.17%Sep 2, 2025
- High8.2A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on certain public (unauthenticated) and authenticated API endpoints.Check if you run itEPSS 0.52%Sep 2, 2025
- High7.7Unauthorized disclosure of sensitive data: Any user with or permissions on resources could retrieve Helm values containing credentials or other secrets.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium6.9E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by defCheck if you run itEPSS 0.36%Sep 2, 2025
- High8.7E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation.Check if you run itEPSS 0.34%Sep 2, 2025
- High7.7E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application serCheck if you run itEPSS 0.26%Sep 2, 2025
- Medium5.3E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication.Check if you run itEPSS 0.31%Sep 2, 2025
- Critical9.3E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password.Check if you run itEPSS 0.54%Sep 2, 2025
- Critical9.8A deserialization vulnerability exists in the H2O-3 REST API (POST /99/ImportSQLTable) that affects all versions up to 3.46.0.7.Check if you run itEPSS 0.69%Sep 2, 2025
- Medium6.9Lack of authorisation in Deporsite by T-INNOVA.Check if you run itEPSS 0.33%Sep 2, 2025
- High8.5A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS.Check if you run itEPSS 0.27%Sep 2, 2025
- Low2.3OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14…Check if you run itEPSS 0.28%Sep 2, 2025
- Medium5.3A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2.Check if you run itEPSS 0.29%Sep 2, 2025
Sort