Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administraCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modiCheck if you run itEPSS 0.24%Dec 9, 2025
- Medium4.3An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.Check if you run itEPSS 0.26%Dec 9, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web script or HTCheck if you run itEPSS 0.26%Dec 9, 2025
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- High7.5Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length.Check if you run itEPSS 0.64%Dec 9, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for theCheck if you run itEPSS 0.27%Dec 9, 2025
- High8.1Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative funCheck if you run itEPSS 0.54%Dec 9, 2025
- Medium4.6A stored Cross Site Scripting (XSS) vulnerability in the bulletin board (SchwarzeBrett) in adata Software GmbH Mitarbeiter Portal 2.15.2.0 allows remote authenticated users to execCheck if you run itEPSS 0.34%Dec 9, 2025
- High8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files.Check if you run itEPSS 0.77%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init of_icc_get() alloc resources for path handle, weCheck if you run itEPSS 0.20%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() tad_pmu_init() won't remove the callbaCheck if you run itEPSS 0.20%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of fdt buffer This is reported by kmemleak detector: unreferenced object 0xff6000Check if you run itEPSS 0.20%Dec 8, 2025
- Medium6.1NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.27%Dec 8, 2025
- Medium6.3WBCE CMS is a content management system.Check if you run itEPSS 0.48%Dec 8, 2025
- Medium6.5Astro is a web framework.Check if you run itEPSS 0.31%Dec 8, 2025
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.66%Dec 8, 2025
- Medium4.6Tuleap is a free and open source suite for management of software development and collaboration.Check if you run itEPSS 0.16%Dec 8, 2025
- Medium4.6Tuleap is a free and open source suite for management of software development and collaboration.Check if you run itEPSS 0.14%Dec 8, 2025
- Medium4.6Tuleap is a free and open source suite for management of software development and collaboration.Check if you run itEPSS 0.14%Dec 8, 2025
- Medium4.6Tuleap is an Open Source Suite for management of software development and collaboration.Check if you run itEPSS 0.14%Dec 8, 2025
- Medium6.5Tuleap is an Open Source Suite for management of software development and collaboration.Check if you run itEPSS 0.28%Dec 8, 2025
- Medium6.5IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.Check if you run itEPSS 0.29%Dec 8, 2025
- Medium5.9c-ares is an asynchronous resolver library.Check if you run itEPSS 0.43%Dec 8, 2025
- Medium5.4IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improper validation ofCheck if you run itEPSS 0.17%Dec 8, 2025
Sort