Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Contr…Check if you run itEPSS 0.14%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed dir…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated admi…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium5.5A vulnerability was found in ericc-ch copilot-api up to 0.7.0.Check if you run itEPSS 0.18%Apr 20, 2026
- High8.7KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dim…Check if you run itEPSS 0.29%Apr 20, 2026
- High8.7Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.69%Apr 20, 2026
- Medium5.3Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.18%Apr 20, 2026
- Medium6.7Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release vers…Check if you run itEPSS 0.09%Apr 20, 2026
- Critical9.9Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/{username}.Check if you run itEPSS 0.28%Apr 20, 2026
- High7.8Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted fileCheck if you run itEPSS 0.12%Apr 20, 2026
- Medium6.6python-dotenv reads key-value pairs from a .env file and can set them as environment variables.Check if you run itEPSS 0.25%Apr 20, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 0.13%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 1.19%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability.Check if you run itEPSS 0.88%Apr 20, 2026
- Medium4.9Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.50%Apr 20, 2026
- High8.1Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.64%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 1.19%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability.Check if you run itEPSS 0.42%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 0.44%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability.Check if you run itEPSS 1.16%Apr 20, 2026
- Medium6.5A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated…Check if you run itEPSS 0.32%Apr 20, 2026
- Low2.0A weakness has been identified in Pagekit CMS up to 1.0.18.Check if you run itEPSS 0.24%Apr 20, 2026
- Low1.9A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0.Check if you run itEPSS 0.21%Apr 20, 2026
- Low2.0A vulnerability was identified in Z-BlogPHP 1.7.5.Check if you run itEPSS 0.22%Apr 20, 2026
- High7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-serv…Check if you run itEPSS 0.08%Apr 20, 2026
Sort