Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot.Check if you run itEPSS 0.26%Oct 28, 2025
- High7.5An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver.Check if you run itEPSS 0.35%Oct 28, 2025
- High8.8alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted file upload.Check if you run itEPSS 0.60%Oct 28, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.71%Oct 28, 2025
- Medium5.3Improper Resource Shutdown or Release vulnerability in Apache Tomcat.Check if you run itEPSS 1.25%Oct 27, 2025
- High7.5Relative Path Traversal vulnerability in Apache Tomcat.Check this weekEPSS 64.41%Oct 27, 2025
- Critical9.6Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.Check this weekEPSS 10.17%Oct 27, 2025
- High8.6rocketsoftware trufusion_enterprise Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.00%Oct 27, 2025
- Medium5.1A security vulnerability has been detected in D-Link DAP-2695 2.00RC13.Check if you run itEPSS 7.03%Oct 27, 2025
- Medium6.9A vulnerability was determined in SourceCodester Point of Sales 1.0.Check if you run itEPSS 0.42%Oct 27, 2025
- Medium5.1A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0.Check if you run itEPSS 0.31%Oct 27, 2025
- Medium6.2Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Services Meta-services modules) allows StoreCheck if you run itEPSS 0.21%Oct 27, 2025
- Critical9.4Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data.Check if you run itEPSS 0.78%Oct 27, 2025
- Medium5.3A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4.Check if you run itEPSS 0.48%Oct 27, 2025
- Medium6.4Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer SCheck if you run itEPSS 0.21%Oct 27, 2025
- Medium5.5An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.Check if you run itEPSS 0.34%Oct 27, 2025
- High8.4Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issCheck if you run itEPSS 0.43%Oct 27, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.83%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addonsCheck if you run itEPSS 0.17%Oct 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request Forgery.This issue affects Entrada: from n/a through 5.7.7.Check if you run itEPSS 0.12%Oct 27, 2025
- Medium5.3A weakness has been identified in givanz Vvveb up to 1.0.7.3.Check if you run itEPSS 0.39%Oct 27, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allows Server Side Request Forgery.This issue affects Slider Templates: from n/a throCheck if you run itEPSS 0.15%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows SCheck if you run itEPSS 0.17%Oct 27, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allows Stored XSS.This issue affects FanBridge signup: from n/a through <= 0.6.Check if you run itEPSS 0.11%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affeCheck if you run itEPSS 0.17%Oct 27, 2025
Sort