Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can perform an arbitrary file read via a maliciously crafted web reCheck if you run itEPSS 0.98%Jul 12, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Movie Theater Seat Reservation System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Critical9.8The GB Forms DB plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2 via the gbfdb_talk_to_front() function.Check if you run itEPSS 0.98%Jul 11, 2025
- Medium6.9A vulnerability was found in Campcodes Online Recruitment Management System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Medium5.1A vulnerability was found in LiveHelperChat lhc-php-resque Extension up to ee1270b35625f552425e32a6a3061cd54b5085c4.Check if you run itEPSS 0.30%Jul 11, 2025
- Medium6.7Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands.Check if you run itEPSS 0.15%Jul 10, 2025
- Medium5.1Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions.Check if you run itEPSS 0.15%Jul 10, 2025
- Medium5.1Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command lineCheck if you run itEPSS 0.15%Jul 10, 2025
- High8.6An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives.Check if you run itEPSS 1.72%Jul 10, 2025
- Medium5.1A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic.Check if you run itEPSS 0.29%Jul 10, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtio_pci_admCheck if you run itEPSS 0.14%Jul 10, 2025
- Medium5.5The Lana Downloads Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the endpoint parameters in versions up to, and including, 1.10.0 due to insufficienCheck if you run itEPSS 0.30%Jul 10, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted paylCheck if you run itEPSS 0.21%Jul 10, 2025
- Medium6.8An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck if you run itEPSS 0.15%Jul 9, 2025
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 0.66%Jul 9, 2025
- Critical10.0An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crCheck this weekEPSS 16.38%Jul 9, 2025
- High7.5Zimbra Collaboration (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 is vulnerable to a denial of service condition due to improper handling of excessiCheck if you run itEPSS 1.61%Jul 9, 2025
- Medium4.3IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used for tCheck if you run itEPSS 0.26%Jul 8, 2025
- Medium4.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, an unauthenticated attacCheck if you run itEPSS 0.22%Jul 7, 2025
- Medium4.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could turn off the scheduled searcCheck if you run itEPSS 0.30%Jul 7, 2025
- Medium6.5In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an unauthenticated attackCheck if you run itEPSS 0.20%Jul 7, 2025
- Medium5.3A vulnerability was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0.Check if you run itEPSS 0.49%Jul 7, 2025
Sort