Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary JavascCheck if you run itEPSS 0.22%Apr 2, 2026
- Medium5.3User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform.Check if you run itEPSS 0.36%Apr 2, 2026
- Critical9.9An issue was discovered in Percona PMM before 3.7.Check if you run itEPSS 0.30%Apr 2, 2026
- Medium4.0HCL BigFix Platform is affected by insufficient authentication.Check if you run itEPSS 0.12%Apr 1, 2026
- High8.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.Check if you run itEPSS 0.10%Apr 1, 2026
- Low2.1A vulnerability was found in Nothings stb up to 1.26.Check if you run itEPSS 0.69%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM.Check if you run itEPSS 0.20%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem.Check if you run itEPSS 0.21%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default.Check if you run itEPSS 0.20%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf.Check if you run itEPSS 0.20%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom.Check if you run itEPSS 0.21%Apr 1, 2026
- Medium6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a…Check if you run itEPSS 0.35%Apr 1, 2026
- Medium5.4IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.20%Apr 1, 2026
- Medium6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.1IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection.Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.4IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Check if you run itEPSS 0.21%Apr 1, 2026
- High8.8IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DaCheck if you run itEPSS 0.17%Apr 1, 2026
- High8.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.51%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.32%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.31%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.39%Apr 1, 2026
- High8.6A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the contextCheck if you run itEPSS 0.69%Apr 1, 2026
- Critical10.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.40%Apr 1, 2026
- High8.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.51%Apr 1, 2026
- Medium5.3A vulnerability has been found in Nothings stb up to 2.30.Check if you run itEPSS 0.29%Apr 1, 2026
Sort