Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.Check this weekEPSS 44.00%Jun 28, 2025
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check this weekEPSS 77.00%Jun 25, 2025
- Medium5.3A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611.Check this weekEPSS 51.00%Jun 24, 2025
- High7.5Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a netCheck this weekEPSS 83.00%Jun 20, 2025
- UnknownFunnelKit funnelkit_automations Missing AuthorizationPatch nowKEVEPSS 3.35%Jun 18, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows StoreCheck this weekEPSS 19.00%Jun 17, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the e-mail manager function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browserCheck this weekEPSS 27.00%Jun 17, 2025
- Low2.3A vulnerability was found in comfyanonymous comfyui 0.3.40.Check this weekEPSS 43.00%Jun 16, 2025
- Medium5.1A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1.Check this weekEPSS 34.00%Jun 16, 2025
- High8.8The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.Check if you run itEPSS 0.53%Jun 11, 2025
- High7.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.51%Jun 10, 2025
- Medium6.3FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents.Check if you run itEPSS 0.45%Jun 9, 2025
- Unknownarc53 docsgpt Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 17.09%Jun 8, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Jun 8, 2025
- Medium4.0Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.39%Jun 6, 2025
- Low2.7A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks.Check if you run itEPSS 0.83%Jun 6, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamil Shafeev «Подсказки» от DaData.ru dadata-ru allows Stored XSS.This issueCheck if you run itEPSS 0.33%Jun 6, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0.Check if you run itEPSS 0.43%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects DyCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium5.3A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.48%Jun 4, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.48%Jun 4, 2025
- Medium6.5PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database curCheck if you run itEPSS 0.35%Jun 4, 2025
- High7.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.Check this weekEPSS 10.00%Jun 3, 2025
- Medium4.8Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.14%Jun 2, 2025
- Medium5.3Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing teamCheck this weekEPSS 31.00%May 29, 2025