Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user input is concatenated into a…Check if you run itEPSS 2.45%Mar 25, 2026
- Critical9.8node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.Check if you run itEPSS 1.77%Mar 25, 2026
- Critical9.8textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.Check if you run itEPSS 2.57%Mar 25, 2026
- Medium5.4Kiteworks is a private data network (PDN).Check if you run itEPSS 0.25%Mar 25, 2026
- High7.7A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affecte…Check if you run itEPSS 0.30%Mar 25, 2026
- Medium6.1A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information.Check if you run itEPSS 0.16%Mar 25, 2026
- Medium5.4A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and…Check if you run itEPSS 0.36%Mar 25, 2026
- Medium5.3A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacke…Check if you run itEPSS 0.38%Mar 25, 2026
- Medium4.8A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker…Check if you run itEPSS 0.25%Mar 25, 2026
- Medium6.5A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.Check if you run itEPSS 0.14%Mar 25, 2026
- Medium5.4A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting…Check if you run itEPSS 0.17%Mar 25, 2026
- Medium6.1A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9…Check if you run itEPSS 0.16%Mar 25, 2026
- High8.6A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst…Check if you run itEPSS 0.37%Mar 25, 2026
- High8.6A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VL…Check if you run itEPSS 0.37%Mar 25, 2026
- Medium6.5A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a d…Check if you run itEPSS 0.10%Mar 25, 2026
- High8.6A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance…Check if you run itEPSS 0.37%Mar 25, 2026
- High7.4A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.Check if you run itEPSS 0.18%Mar 25, 2026
- Medium4.3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0…Check if you run itEPSS 0.21%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearcCheck if you run itEPSS 0.19%Mar 25, 2026
- High7.5Missing Authorization vulnerability in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce allows Exploiting Incorrectly Configured Access Control SecuriCheck if you run itEPSS 0.28%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Exploiting Incorrectly ConfigurCheck if you run itEPSS 0.19%Mar 25, 2026
- Medium6.5Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issCheck if you run itEPSS 0.29%Mar 25, 2026
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Retrieve Embedded Sensitive Data.This issue affects ContaCheck if you run itEPSS 0.25%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.22%Mar 25, 2026
- High7.5Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access ContCheck if you run itEPSS 0.34%Mar 25, 2026
Sort