Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8nootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- Critical10.0Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete contrCheck if you run itEPSS 0.36%Oct 31, 2025
- Low3.1QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero).Check if you run itEPSS 0.19%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- Medium5.4LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the endpoint.Check if you run itEPSS 0.35%Oct 30, 2025
- Critical10.0ui unifi_access Missing Authentication for Critical FunctionPatch nowKEVEPSS 41.09%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component.Check if you run itEPSS 0.59%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Executive Summary Report component.Check if you run itEPSS 0.59%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Capacity Planning Report component.Check if you run itEPSS 0.59%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool.Check if you run itEPSS 0.49%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component.Check if you run itEPSS 0.49%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal.Check if you run itEPSS 1.66%Oct 30, 2025
- Critical9.2Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed.Check if you run itEPSS 1.06%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins.Check if you run itEPSS 2.30%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence (BPI) component.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component.Check if you run itEPSS 1.21%Oct 30, 2025
- High8.7Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf).Check if you run itEPSS 1.11%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2024R1.4.2 configure some systemd unit files with permission sets that were too permissive.Check if you run itEPSS 0.36%Oct 30, 2025
- High8.8Nagios XI versions prior to 2024R1.2.2 contain a host header injection vulnerability.Check if you run itEPSS 0.47%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard.Check if you run itEPSS 4.03%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its NagVis integration.Check if you run itEPSS 1.68%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin.Check if you run itEPSS 4.03%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes.Check if you run itEPSS 1.04%Oct 30, 2025
Sort