Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue.Check if you run itEPSS 0.26%Aug 26, 2025
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue.Check if you run itEPSS 0.26%Aug 26, 2025
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection.Check if you run itEPSS 0.26%Aug 26, 2025
- High7.8NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection.Check if you run itEPSS 0.30%Aug 26, 2025
- High7.4IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.Check if you run itEPSS 0.36%Aug 26, 2025
- Medium6.1IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim.Check if you run itEPSS 0.29%Aug 26, 2025
- Medium4.8The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCCCheck if you run itEPSS 0.16%Aug 26, 2025
- High7.1A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.37%Aug 26, 2025
- Medium4.7The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.118.0.Check if you run itEPSS 0.19%Aug 26, 2025
- Medium4.3The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tf_order_status_email_resend_function, tf_visitor_detaiCheck if you run itEPSS 0.25%Aug 26, 2025
- High8.8The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5.Check if you run itEPSS 0.45%Aug 26, 2025
- Low2.0A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS.Check if you run itEPSS 0.14%Aug 26, 2025
- Medium6.9A vulnerability has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.55%Aug 26, 2025
- Medium5.3A weakness has been identified in diyhi bbs up to 6.8.Check if you run itEPSS 0.38%Aug 26, 2025
- Medium5.3A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.36%Aug 26, 2025
- Critical9.1n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.pyCheck if you run itEPSS 0.82%Aug 26, 2025
- Critical9.1Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are stored in plaintext within log files on thCheck if you run itEPSS 0.24%Aug 26, 2025
- Critical9.8An arbitrary code execution vulnerability in Badaso CMS 2.9.11.Check if you run itEPSS 0.65%Aug 26, 2025
- Medium6.5SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability.Check if you run itEPSS 0.24%Aug 26, 2025
- Medium6.1IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, resulting in a reflectedCheck if you run itEPSS 0.23%Aug 26, 2025
- Medium5.4IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgtCheck if you run itEPSS 0.28%Aug 26, 2025
- Medium6.5The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell coCheck if you run itEPSS 0.40%Aug 26, 2025
- High7.5Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via the template parameter to index.php.Check if you run itEPSS 0.97%Aug 26, 2025
- High8.8An issue was discovered in Mahara 23.04.8 and 24.04.4.Check if you run itEPSS 0.32%Aug 26, 2025
- Critical9.1Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions viCheck if you run itEPSS 0.32%Aug 26, 2025
Sort