Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.Check if you run itEPSS 0.25%Apr 30, 2025
- Medium4.6Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.Check if you run itEPSS 0.23%Apr 30, 2025
- Medium6.3A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, executeCheck if you run itEPSS 0.35%Apr 30, 2025
- High7.1A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side cCheck if you run itEPSS 0.41%Apr 30, 2025
- High7.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.60%Apr 30, 2025
- Medium4.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.54%Apr 29, 2025
- Medium4.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.54%Apr 29, 2025
- Low3.5YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.29%Apr 29, 2025
- High7.6YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.63%Apr 29, 2025
- Medium4.3A flaw was found in libsoup.Check if you run itEPSS 0.44%Apr 29, 2025
- Low3.3libsnowflakeclient is the Snowflake Connector for C/C++.Check if you run itEPSS 0.17%Apr 29, 2025
- Medium6.1Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning securitCheck if you run itEPSS 0.31%Apr 28, 2025
- Medium6.0Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.Check if you run itEPSS 0.49%Apr 28, 2025
- Low2.3DIFY is an open-source LLM app development platform.Check if you run itEPSS 0.24%Apr 28, 2025
- Medium5.7An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.Check if you run itEPSS 0.25%Apr 27, 2025
- High8.8The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget.Check if you run itEPSS 0.79%Apr 26, 2025
- Medium5.1An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.Check if you run itEPSS 0.14%Apr 25, 2025
- Medium5.1A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.Check if you run itEPSS 0.19%Apr 25, 2025
- Medium5.1An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.Check if you run itEPSS 0.15%Apr 25, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.54%Apr 25, 2025
- Medium6.1The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.dec.2012.Check if you run itEPSS 0.31%Apr 25, 2025
- Medium6.1The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due toCheck if you run itEPSS 0.33%Apr 25, 2025
- Medium6.1The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.25%Apr 25, 2025
- Medium6.1The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.31%Apr 25, 2025
- High7.1NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.Check if you run itEPSS 0.22%Apr 25, 2025