Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side requestCheck if you run itEPSS 0.81%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticaCheck if you run itEPSS 0.81%Sep 29, 2025
- High8.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanisCheck if you run itEPSS 0.59%Sep 29, 2025
- High7.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker iCheck if you run itEPSS 0.66%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin accoCheck if you run itEPSS 1.23%Sep 29, 2025
- High8.7Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: theCheck if you run itEPSS 0.67%Sep 29, 2025
- Critical9.3Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL keCheck if you run itEPSS 0.39%Sep 29, 2025
- Critical9.4Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GPCheck if you run itEPSS 0.70%Sep 29, 2025
- Critical9.2Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded privateCheck if you run itEPSS 0.41%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker contaCheck if you run itEPSS 1.00%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck if you run itEPSS 0.55%Sep 29, 2025
- Critical9.3Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private kCheck if you run itEPSS 0.48%Sep 29, 2025
- Medium4.8There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supplyCheck if you run itEPSS 0.22%Sep 29, 2025
- Medium6.1There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victiCheck if you run itEPSS 0.25%Sep 29, 2025
- Medium4.8There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supplyCheck if you run itEPSS 0.22%Sep 29, 2025
- Medium4.9IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request.Check if you run itEPSS 0.32%Sep 29, 2025
- Medium6.3An out-of-bounds write issue was addressed with improved bounds checking.Check if you run itEPSS 6.96%Sep 29, 2025
- Medium4.3A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions.Check if you run itEPSS 0.30%Sep 29, 2025
- Medium6.8The credentials required to access the device's web server are sent in base64 within the HTTP headers.Check if you run itEPSS 0.19%Sep 29, 2025
- Medium4.3IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.Check if you run itEPSS 0.24%Sep 29, 2025
- Medium6.4IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.18%Sep 29, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection.Check if you run itEPSS 0.35%Sep 29, 2025
- High8.7A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition.Check if you run itEPSS 0.76%Sep 29, 2025
- Critical9.8chef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 25.95%Sep 29, 2025
- High8.8In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple seCheck if you run itEPSS 0.38%Sep 29, 2025
Sort