Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.8CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.56%Oct 2, 2025
- Medium6.5YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint.Check if you run itEPSS 0.49%Oct 2, 2025
- Medium5.5Discourse is an open-source community discussion platform.Check if you run itEPSS 0.30%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does nCheck if you run itEPSS 0.37%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does noCheck if you run itEPSS 0.37%Oct 1, 2025
- Medium4.9In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role tCheck if you run itEPSS 0.56%Oct 1, 2025
- Medium6.5In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that doesCheck if you run itEPSS 0.45%Oct 1, 2025
- Medium4.6In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does noCheck if you run itEPSS 0.31%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/binfmt_elf: Fix memory leak in load_elf_binary() There is a memory leak reported by kmemleak: unreferenced obCheck if you run itEPSS 0.16%Oct 1, 2025
- Medium6.1An authenticated cross-site scripting (XSS) vulnerability in the Administrative interface of Radware AlteonOS Web UI Management v33.0.4.50 allows attackers to execute arbitrary webCheck if you run itEPSS 0.21%Oct 1, 2025
- Medium5.4A reflected cross-site scripting (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the contextCheck if you run itEPSS 0.18%Oct 1, 2025
- High8.8The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94.Check if you run itEPSS 0.22%Sep 30, 2025
- Medium5.5The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘service[name]’ parameter in all versiCheck if you run itEPSS 0.26%Sep 30, 2025
- Medium6.1The LockerPress – WordPress Security Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%Sep 30, 2025
- Medium4.3The Chat by Chatwee plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3.Check if you run itEPSS 0.16%Sep 30, 2025
- Medium6.4Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, the About button, and tCheck if you run itEPSS 0.13%Sep 30, 2025
- Critical9.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry keyCheck if you run itEPSS 0.48%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /Check if you run itEPSS 0.52%Sep 29, 2025
- High8.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanisCheck if you run itEPSS 0.59%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin accoCheck if you run itEPSS 1.23%Sep 29, 2025
- Critical9.4Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GPCheck if you run itEPSS 0.70%Sep 29, 2025
- Critical9.2Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded privateCheck if you run itEPSS 0.41%Sep 29, 2025
- Medium4.8There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supplyCheck if you run itEPSS 0.22%Sep 29, 2025
- Medium4.8There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supplyCheck if you run itEPSS 0.22%Sep 29, 2025
Sort