Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user.Check if you run itEPSS 1.88%Oct 30, 2025
- High8.6IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.42%Oct 30, 2025
- High7.5IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.53%Oct 30, 2025
- Medium4.8Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10Check if you run itEPSS 0.22%Oct 30, 2025
- Medium6.1node-tar is a Tar for Node.js.Check if you run itEPSS 0.13%Oct 30, 2025
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.30%Oct 30, 2025
- Medium5.1Movary is a web application to track, rate and explore your movie watch history.Check if you run itEPSS 0.26%Oct 30, 2025
- Medium5.1By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 202Check if you run itEPSS 0.23%Oct 30, 2025
- Medium5.1Movary is a web application to track, rate and explore your movie watch history.Check if you run itEPSS 0.25%Oct 30, 2025
- High7.1JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.29%Oct 30, 2025
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.81%Oct 30, 2025
- Critical9.6JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.50%Oct 30, 2025
- Medium6.8The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditionsCheck if you run itEPSS 0.18%Oct 30, 2025
- Low2.1Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .Check if you run itEPSS 0.21%Oct 30, 2025
- Critical10.0Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .Check if you run itEPSS 0.37%Oct 30, 2025
- Critical10.0Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .Check if you run itEPSS 0.37%Oct 30, 2025
- Medium5.4Dell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20.Check if you run itEPSS 0.21%Oct 30, 2025
- Medium4.3Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internCheck if you run itEPSS 0.30%Oct 30, 2025
- Medium6.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium6.3Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium4.3Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.Check if you run itEPSS 1.14%Oct 30, 2025
- High7.8Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.92%Oct 30, 2025
- Medium5.1URVE Smart Office is vulnerable to Stored XSS in report problem functionality.Check if you run itEPSS 0.35%Oct 30, 2025
- Medium5.1Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality.Check if you run itEPSS 0.21%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vfs: Don't leak disconnected dentries on umount When user calls open_by_handle_at() on some inode that is not caCheck if you run itEPSS 0.17%Oct 30, 2025
Sort