Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiCheck if you run itEPSS 0.39%Nov 17, 2025
- Medium6.9A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0.Check if you run itEPSS 0.42%Nov 17, 2025
- Medium4.3IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.Check if you run itEPSS 0.23%Nov 17, 2025
- High8.0IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system.Check if you run itEPSS 0.87%Nov 17, 2025
- Medium6.9A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0.Check if you run itEPSS 0.42%Nov 17, 2025
- Medium6.9A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0.Check if you run itEPSS 0.45%Nov 17, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0.Check if you run itEPSS 0.42%Nov 17, 2025
- High8.5Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directoriesCheck if you run itEPSS 0.35%Nov 17, 2025
- High8.6Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature.Check if you run itEPSS 9.24%Nov 17, 2025
- Medium4.8CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Check if you run itEPSS 0.19%Nov 17, 2025
- Medium4.5CWE-20 Improper Input ValidationCheck if you run itEPSS 0.28%Nov 17, 2025
- Medium4.5Multiple CWE-352 Cross-Site Request Forgery (CSRF)Check if you run itEPSS 0.16%Nov 17, 2025
- Medium4.8Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Check if you run itEPSS 0.19%Nov 17, 2025
- Medium6.8CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Check if you run itEPSS 0.82%Nov 17, 2025
- Medium4.8@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce rCheck if you run itEPSS 0.24%Nov 17, 2025
- Medium6.9ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.43%Nov 17, 2025
- High7.4Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outsideCheck if you run itEPSS 0.21%Nov 17, 2025
- Medium5.5A flaw was found in libvirt.Check if you run itEPSS 0.13%Nov 17, 2025
- Medium6.9A vulnerability was found in Campcodes Supplier Management System 1.0.Check if you run itEPSS 0.42%Nov 17, 2025
- High7.5Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.Check if you run itEPSS 0.30%Nov 17, 2025
- High7.2phpMyFAQ is an open source FAQ web application.Check if you run itEPSS 0.80%Nov 17, 2025
- High8.8An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input.Check if you run itEPSS 0.45%Nov 17, 2025
- Medium5.3A vulnerability has been found in code-projects Simple Food Ordering System 1.0.Check if you run itEPSS 0.34%Nov 17, 2025
- Medium5.3A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0.Check if you run itEPSS 0.33%Nov 17, 2025
- High8.7A security vulnerability has been detected in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.95%Nov 17, 2025
Sort