Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De…Check if you run itEPSS 0.14%Mar 4, 2026
- Medium4.9A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.29%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.6Craft is a content management system (CMS).Check if you run itEPSS 0.65%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 0.57%Mar 4, 2026
- High7.1Craft is a content management system (CMS).Check if you run itEPSS 0.47%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 1.14%Mar 4, 2026
- High7.5Craft is a content management system (CMS).Check if you run itEPSS 0.63%Mar 4, 2026
- Medium5.3Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.Check if you run itEPSS 0.19%Mar 4, 2026
- Medium6.92N Access Commander version 3.4.1 and prior is vulnerable to log pollution.Check if you run itEPSS 0.29%Mar 4, 2026
- High8.8API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection.Check if you run itEPSS 0.89%Mar 4, 2026
- Medium6.6erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json.Check if you run itEPSS 0.24%Mar 4, 2026
- Low2.0A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties.Check if you run itEPSS 0.18%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the "Legacy Form" block.Check if you run itEPSS 0.28%Mar 4, 2026
- Low2.3Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads t…Check if you run itEPSS 0.24%Mar 4, 2026
- High8.9Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter.Check if you run itEPSS 0.95%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without pro…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.4The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.9 due to insuffic…Check if you run itEPSS 0.25%Mar 4, 2026
- Medium4.4The Taskbuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.3 due to insufficient in…Check if you run itEPSS 0.26%Mar 4, 2026
- Medium6.5The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9…Check if you run itEPSS 0.37%Mar 4, 2026
- High7.2The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and…Check if you run itEPSS 0.32%Mar 4, 2026
- High7.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.40%Mar 3, 2026
- Medium4.3HomeBox is a home inventory and organization system.Check if you run itEPSS 0.28%Mar 3, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 1.15%Mar 3, 2026