Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: sched/psi: use kernfs polling functions for PSI trigger polling Destroying psi trigger in cgroup_fi…Check if you run itEPSS 0.14%Dec 24, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 ("drm/mediatek: Add A…Check if you run itEPSS 0.15%Dec 16, 2025
- High8.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.Check if you run itEPSS 0.50%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.60%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.59%Dec 15, 2025
- Medium6.1Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.25%Dec 12, 2025
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an au…Check if you run itEPSS 0.27%Dec 11, 2025
- Medium6.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 11, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium6.51Panel is an open-source, web-based control panel for Linux server management.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium4.6A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3.Open the advisoryDec 8, 2025
- High8.8Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session.Open the advisoryDec 8, 2025
- Medium6.1Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-…Check if you run itEPSS 0.22%Dec 8, 2025
- High8.3In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting (XSS).Check if you run itEPSS 0.29%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent…Check if you run itEPSS 0.14%Dec 8, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint.Open the advisoryDec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/dog/{agentId} endpoint.Open the advisoryDec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint.Open the advisoryDec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devices/name/{agent_id} endpoint.Open the advisoryDec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicegroups/ endpoint.Open the advisoryDec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/schedule endpoint.Open the advisoryDec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/building endpoint.Open the advisoryDec 5, 2025