Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Clinked Clinked Client Portal clinked-client-portal allows Reflected XSS.ThisCheck if you run itEPSS 0.29%Apr 17, 2025
- High7.0Uncontrolled Search Path Element vulnerability in OpenText Secure Content Manager on Windows allows DLL Side-Loading.This issue affects Secure Content Manager: 23.4.Check if you run itEPSS 0.19%Apr 17, 2025
- Critical9.8Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), wCheck if you run itEPSS 1.02%Apr 17, 2025
- High7.8Omnissa Horizon Client for Windows contains an LPE Vulnerability.Check if you run itEPSS 0.15%Apr 16, 2025
- Medium6.1A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading tCheck if you run itEPSS 0.35%Apr 16, 2025
- High8.8A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the atCheck if you run itEPSS 0.99%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1_uart_probe() function calls w1_uart_serdev_open() (which includCheck if you run itEPSS 0.20%Apr 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245dCheck if you run itEPSS 0.38%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posixacl', parent directoryCheck if you run itEPSS 0.20%Apr 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request.Check this weekEPSS 69.51%Apr 16, 2025
- Medium5.4Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DynamCheck if you run itEPSS 0.45%Apr 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Right Click Disable OR Ban right-click-disable-or-ban allows Stored XSS.This issue affects Right Click Disable OR Ban:Check if you run itEPSS 0.19%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_legacy_tracking_ops->init() call in check_fCheck if you run itEPSS 0.19%Apr 16, 2025
- Medium6.1The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.4SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Check if you run itEPSS 0.30%Apr 15, 2025
- Medium5.3Ash Authentication provides authentication for the Ash framework.Check if you run itEPSS 0.32%Apr 15, 2025
- Low2.2Weblate is a web based localization tool.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium5.3Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).Check if you run itEPSS 0.50%Apr 15, 2025
- Critical9.0A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function.Check if you run itEPSS 0.97%Apr 15, 2025
- Medium5.2Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”.Check if you run itEPSS 0.15%Apr 15, 2025
- Medium6.4When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally.Check if you run itEPSS 0.27%Apr 15, 2025
- Low2.6SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium6.7Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability.Check if you run itEPSS 0.13%Apr 15, 2025