Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar.Check if you run itEPSS 0.31%Dec 5, 2025
- High8.7Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the appliCheck if you run itEPSS 0.62%Dec 5, 2025
- Medium5.4Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.4Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.Check if you run itEPSS 0.28%Dec 5, 2025
- Medium5.5Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.Check if you run itEPSS 0.15%Dec 5, 2025
- High8.6Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the sCheck if you run itEPSS 0.37%Dec 5, 2025
- High8.6Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system.Check if you run itEPSS 0.24%Dec 5, 2025
- Critical10.0Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability.Check if you run itEPSS 0.69%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- Medium4.3Nextcloud Tables allows you to create your own tables with individual columns.Check if you run itEPSS 0.28%Dec 5, 2025
- High8.5Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escaCheck if you run itEPSS 0.27%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- High8.7ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verifieCheck if you run itEPSS 0.35%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/dog/{agentId} endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devices/name/{agent_id} endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Critical9.3ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server useCheck if you run itEPSS 0.72%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/plan endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/building endpoint.Check if you run itEPSS 0.26%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicegroups/ endpoint.Check if you run itEPSS 0.26%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/schedule endpoint.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/defined endpoint.Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.3Nextcloud Tables allows you to create your own tables with individual columns.Check if you run itEPSS 0.25%Dec 5, 2025
- High8.7ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webseCheck if you run itEPSS 0.37%Dec 5, 2025
- Medium5.3Nextcloud Tables allows you to create your own tables with individual columns.Check if you run itEPSS 0.29%Dec 5, 2025
Sort