Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component.Check if you run itEPSS 0.78%Jul 29, 2025
- Medium6.5An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.Check if you run itEPSS 0.33%Jul 29, 2025
- UnknownSolarWinds webhelpdesk Use of Hard-coded CredentialsPatch nowKEVEPSS 0.32%Jul 29, 2025
- Medium6.9Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate.Check if you run itEPSS 0.51%Jul 28, 2025
- Critical9.8RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language.Check if you run itEPSS 0.49%Jul 28, 2025
- Medium6.9Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate.Check if you run itEPSS 0.62%Jul 28, 2025
- Critical10.0A SAML library not dependent on any frameworks that runs in Node.Check if you run itEPSS 0.36%Jul 28, 2025
- Low3.7A vulnerability was found in the netavark package, a network stack for containers used with Podman.Check if you run itEPSS 0.34%Jul 28, 2025
- Medium5.5In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" commandCheck if you run itEPSS 0.27%Jul 28, 2025
- Medium5.5In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshotsCheck if you run itEPSS 0.27%Jul 28, 2025
- Medium5.4In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpointCheck if you run itEPSS 0.17%Jul 28, 2025
- Medium5.8In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithmsCheck if you run itEPSS 0.19%Jul 28, 2025
- Medium4.8In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset pageCheck if you run itEPSS 0.86%Jul 28, 2025
- Medium4.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configurationCheck if you run itEPSS 0.24%Jul 28, 2025
- Medium4.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependenciesCheck if you run itEPSS 0.24%Jul 28, 2025
- Low3.7In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCheck if you run itEPSS 0.14%Jul 28, 2025
- Medium5.4In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCheck if you run itEPSS 0.17%Jul 28, 2025
- Medium6.1In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictionsCheck if you run itEPSS 0.29%Jul 28, 2025
- High7.2Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certaiCheck if you run itEPSS 0.13%Jul 28, 2025
- Critical9.8CodeIgniter is a PHP full-stack web framework.Check if you run itEPSS 1.53%Jul 28, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in bsc Peru Cocktails App 1.0.0 on Android.Check if you run itEPSS 0.14%Jul 28, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used,Check if you run itEPSS 0.35%Jul 28, 2025
- High8.2mptcp: make fallback action and fallback decision atomicCheck if you run itEPSS 0.22%Jul 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchroCheck if you run itEPSS 0.72%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add set_channel_map api support" This reverts commit 7796c97df6b1b2206681a07Check if you run itEPSS 0.14%Jul 28, 2025
Sort