Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges toCheck if you run itEPSS 1.25%Aug 27, 2025
- Medium5.0A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attackerCheck if you run itEPSS 0.30%Aug 27, 2025
- Medium5.4A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attackerCheck if you run itEPSS 0.26%Aug 27, 2025
- Medium6.5A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.Check if you run itEPSS 0.59%Aug 27, 2025
- High7.5GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking andCheck if you run itEPSS 0.36%Aug 27, 2025
- High8.7A vulnerability has been found in Linksys E1700 1.0.0.4.003.Check if you run itEPSS 1.42%Aug 27, 2025
- Critical9.0Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privilegeCheck if you run itEPSS 0.18%Aug 27, 2025
- High8.8Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code.Check if you run itEPSS 0.16%Aug 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaimchaikin Admin Menu Groups admin-menu-groups allows Stored XSS.This issueCheck if you run itEPSS 0.18%Aug 27, 2025
- High7.0An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7.Check if you run itEPSS 0.27%Aug 27, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check this weekEPSS 10.11%Aug 27, 2025
- Medium5.6diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings interface.Check if you run itEPSS 0.24%Aug 27, 2025
- Medium6.1A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified in version 1.7.1, requiring authenticated admin access for exploitation.Check if you run itEPSS 0.28%Aug 27, 2025
- Medium4.4The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7.97 due to insufficieCheck if you run itEPSS 0.19%Aug 26, 2025
- High7.2A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin passCheck if you run itEPSS 0.44%Aug 26, 2025
- High8.8The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.31%Aug 26, 2025
- Medium6.1Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files withCheck if you run itEPSS 0.10%Aug 26, 2025
- Medium4.7The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.118.0.Check if you run itEPSS 0.19%Aug 26, 2025
- Medium6.9A vulnerability has been found in SourceCodester Human Resource Information System 1.0.Check if you run itEPSS 0.49%Aug 26, 2025
- Medium6.9A flaw has been found in SourceCodester Human Resource Information System 1.0.Check if you run itEPSS 0.49%Aug 26, 2025
- High8.8The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5.Check if you run itEPSS 0.45%Aug 26, 2025
- Medium6.9A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.42%Aug 26, 2025
- Medium5.3A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.35%Aug 26, 2025
- Medium5.3A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.35%Aug 26, 2025
- Medium5.3A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.36%Aug 26, 2025
Sort