Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A security flaw has been discovered in soerennb eXtplorer up to 2.1.15.Check if you run itEPSS 0.27%Nov 12, 2025
- High7.7An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized cCheck if you run itEPSS 0.25%Nov 12, 2025
- Medium6.0A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logCheck if you run itEPSS 0.17%Nov 12, 2025
- High7.7A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, couldCheck if you run itEPSS 0.22%Nov 12, 2025
- High7.0An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of aCheck if you run itEPSS 0.13%Nov 12, 2025
- Medium5.2An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to rediCheck if you run itEPSS 0.11%Nov 12, 2025
- Medium4.6Tuleap is an Open Source Suite to improve management of software developments and collaboration.Check if you run itEPSS 0.15%Nov 12, 2025
- Medium4.3IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interCheck if you run itEPSS 0.23%Nov 12, 2025
- High8.1Open Access Management (OpenAM) is an access management solution.Check if you run itEPSS 0.35%Nov 12, 2025
- High7.0The Datadog Agent collects events and metrics from hosts and sends them to Datadog.Check if you run itEPSS 0.12%Nov 12, 2025
- Low3.7CUPS is a standards-based, open-source printing system, and contains the code of the filters of the former package as library functions to be used for the data format conversion taCheck if you run itEPSS 0.48%Nov 12, 2025
- Medium5.3A vulnerability was identified in Campcodes School Fees Payment Management System 1.0.Check if you run itEPSS 0.35%Nov 12, 2025
- Medium5.3Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability.Check if you run itEPSS 0.26%Nov 12, 2025
- Low3.5In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privilegCheck if you run itEPSS 0.30%Nov 12, 2025
- Medium6.1In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker cCheck if you run itEPSS 0.25%Nov 12, 2025
- High8.8A flaw was found in the Observability Operator.Check if you run itEPSS 0.35%Nov 12, 2025
- High7.8A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability.Check if you run itEPSS 0.17%Nov 12, 2025
- High7.8A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.18%Nov 12, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affectCheck if you run itEPSS 0.28%Nov 12, 2025
- Critical10.0The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserializationCheck if you run itEPSS 0.63%Nov 12, 2025
- Critical9.4N-central < 2025.4 is vulnerable to authentication bypass via path traversalCheck if you run itEPSS 0.60%Nov 12, 2025
- High8.4N-able N-central Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 31.68%Nov 12, 2025
- Medium6.9N-able N-central Improper Validation of Specified Quantity in InputPatch nowKEVEPSS 37.39%Nov 12, 2025
- High7.3CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured.Check if you run itEPSS 0.13%Nov 12, 2025
- Medium6.9CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by perfCheck if you run itEPSS 0.45%Nov 12, 2025
Sort