Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have alCheck if you run itEPSS 0.26%Aug 13, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve storedCheck if you run itEPSS 0.32%Aug 13, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have alCheck if you run itEPSS 0.32%Aug 13, 2025
- High7.8NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue.Check if you run itEPSS 0.65%Aug 13, 2025
- High7.8NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions.Check if you run itEPSS 0.21%Aug 13, 2025
- Medium6.3NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memoryCheck if you run itEPSS 0.41%Aug 13, 2025
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.26%Aug 13, 2025
- Critical9.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 7.50%Aug 13, 2025
- Medium5.3A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4.Check if you run itEPSS 0.35%Aug 13, 2025
- High7.3A vulnerability was found in H3C M2 NAS V100R006.Check if you run itEPSS 0.17%Aug 13, 2025
- Medium6.3Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.46%Aug 13, 2025
- Critical9.8The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserializationCheck if you run itEPSS 1.30%Aug 13, 2025
- Medium6.5Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions.Check if you run itEPSS 1.00%Aug 13, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium4.8An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions,Check if you run itEPSS 0.48%Aug 12, 2025
- High7.5Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result inCheck if you run itEPSS 0.60%Aug 12, 2025
- Medium5.4Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local acCheck if you run itEPSS 0.11%Aug 12, 2025
- Medium5.4Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege viCheck if you run itEPSS 0.13%Aug 12, 2025
Sort