Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE932Check if you run itEPSS 0.16%Mar 25, 2026
- High7.4A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.Check if you run itEPSS 0.18%Mar 25, 2026
- High8.8OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'search' parametCheck if you run itEPSS 0.35%Mar 25, 2026
- High7.7A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to rCheck if you run itEPSS 0.30%Mar 25, 2026
- High8.6A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwarCheck if you run itEPSS 0.37%Mar 25, 2026
- High8.6A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 FamilyCheck if you run itEPSS 0.37%Mar 25, 2026
- High8.6A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resultinCheck if you run itEPSS 0.37%Mar 25, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting (XSS).This issue affectCheck if you run itEPSS 0.19%Mar 25, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).This issuCheck if you run itEPSS 0.20%Mar 25, 2026
- Medium5.0Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.Check if you run itEPSS 0.30%Mar 25, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue affects IslandorCheck if you run itEPSS 0.18%Mar 25, 2026
- Medium6.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.This issue affects CAPTCHA: from 0.0.0 before 1.17.0, from 2.0.Check if you run itEPSS 0.29%Mar 25, 2026
- Medium4.7Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).This issue affCheck if you run itEPSS 0.18%Mar 25, 2026
- High7.6Kiteworks is a private data network (PDN).Check if you run itEPSS 0.25%Mar 25, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: froCheck if you run itEPSS 0.14%Mar 25, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 befCheck if you run itEPSS 0.10%Mar 25, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4.Check if you run itEPSS 0.24%Mar 25, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS).This issue affects UI Icons:Check if you run itEPSS 0.16%Mar 25, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue affects Quick ECheck if you run itEPSS 0.14%Mar 25, 2026
- Medium4.3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3Check if you run itEPSS 0.21%Mar 25, 2026
- Medium6.9Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads.Check if you run itEPSS 0.36%Mar 25, 2026
- High8.8Kiteworks is a private data network (PDN).Check if you run itEPSS 1.08%Mar 25, 2026
- Medium5.4A use-after-return vulnerability exists in the server when handling DNS queries signed with SIG(0).Check if you run itEPSS 0.38%Mar 25, 2026
- Medium6.5Under certain conditions, may crash when processing a correctly signed query containing a TKEY record.Check if you run itEPSS 0.60%Mar 25, 2026
- High8.7A SQL Injection vulnerability has been found in Support Board v3.7.7.Patch nowKEVEPSS 0.38%Mar 25, 2026
Sort