Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6tj-actions/changed-files GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 72.09%Mar 14, 2025
- Medium5.3Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')Open the advisoryOct 28, 2024
- None0.0Agent Dart is missing certificate verification checksCheck if you run itEPSS 0.37%Oct 15, 2024
- UnknownJenkins github Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 90.89%Sep 19, 2024
- Unknowncamptocamp terraboard Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.76%May 15, 2024
- Unknownunsafe-libyaml is unmaintainedOpen the advisoryMar 25, 2024
- Unknownpyload pyload Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.91%Jan 22, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)Check if you run itEPSS 3.35%Jan 2, 2024
- Unknownmicroweber microweber Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.26%Dec 20, 2023
- Medium5.9pubnub Insufficient Entropy vulnerabilityCheck if you run itEPSS 0.96%Dec 6, 2023
- Unknownlfprojects mlflow Path Traversal: '\..\filename'Patch nowKEVEPSS 69.68%Dec 1, 2023
- Unknowneasyappointments easyappointments Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 43.75%Nov 17, 2023
- UnknownDenial of Service (DoS) vulnerabilitiesOpen the advisoryOct 6, 2023
- UnknownDenial of Service (DoS) and Arbitrary Code Execution (ACE) vulnerabilitiesOpen the advisoryOct 6, 2023
- UnknownDenial of Service (DoS) vulnerabilityOpen the advisoryOct 6, 2023
- High7.5Ignite Realtime Openfire Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%May 26, 2023
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- High8.8Arbitrary command injection in embano1/wipCheck if you run itEPSS 3.73%Apr 24, 2023
- High7.5dio vulnerable to CRLF injection with HTTP method stringCheck if you run itEPSS 1.17%Mar 21, 2023
- High8.8github-slug-action vulnerable to arbitrary code executionCheck if you run itEPSS 1.58%Mar 13, 2023
- Low3.0Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lowerCheck if you run itEPSS 0.36%Mar 7, 2023
- Medium6.8git2-rs fails to verify SSH keys by defaultCheck if you run itEPSS 0.58%Jan 20, 2023
- LowDuplicate of GHSA-4xh4-v2pq-jvhmOpen the advisoryJan 11, 2023
- High8.8There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execu…Check if you run itEPSS 2.45%Nov 23, 2022
- Medium6.5There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.Check if you run itEPSS 0.47%Nov 23, 2022