Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameterCheck if you run itEPSS 0.36%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/uploaCheck if you run itEPSS 0.21%Oct 2, 2025
- High7.1Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted logCheck if you run itEPSS 0.59%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/createCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/adCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium4.7A vulnerability has been identified within Rancher Manager whereby headers are being sent to an external entity, for example , via the Rancher endpoint.Check if you run itEPSS 0.36%Oct 2, 2025
- High7.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.Check if you run itEPSS 1.30%Oct 2, 2025
- Medium5.9Exposure of sensitive information in Viday.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7Exposure of sensitive information in Viday.Check if you run itEPSS 0.34%Oct 2, 2025
- Medium4.8Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted reCheck if you run itEPSS 0.33%Oct 2, 2025
- Medium6.9Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTCheck if you run itEPSS 0.39%Oct 2, 2025
- Medium6.9Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafteCheck if you run itEPSS 0.34%Oct 2, 2025
- High7.4Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrarCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium5.1Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonateCheck if you run itEPSS 0.35%Oct 2, 2025
- High7.1Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the hostCheck if you run itEPSS 0.38%Oct 2, 2025
- High7.5Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTCheck if you run itEPSS 0.13%Oct 2, 2025
- Critical9.8The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticatCheck if you run itEPSS 0.44%Oct 2, 2025
- High7.1KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT STUDIO versions 8.53 and prior contain a use after free vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High8.4KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.4KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulneCheck if you run itEPSS 0.30%Oct 2, 2025
- Critical9.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path TraverCheck if you run itEPSS 0.28%Oct 2, 2025
Sort