Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to hijack a victim user’s session and perform actions in theirCheck if you run itEPSS 0.17%Jan 5, 2026
- Medium5.3A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0.Check if you run itEPSS 0.38%Jan 5, 2026
- Critical9.3D-Link dir-600 Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.97%Jan 5, 2026
- Medium6.5A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to force the server to initiate an HTTP request via the "GET /Check if you run itEPSS 0.21%Jan 5, 2026
- High7.5A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's resources via the "GET /images" API.Check if you run itEPSS 0.35%Jan 5, 2026
- Critical9.1An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection.Check if you run itEPSS 0.76%Jan 5, 2026
- Medium5.4An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser.Check if you run itEPSS 0.29%Jan 5, 2026
- Medium5.4DO NOT USE THIS CVE RECORD.Check if you run itEPSS 7.00%Jan 5, 2026
- High7.5comfy comfyui-manager Unprotected Alternate ChannelPatch nowKEVEPSS 1.39%Jan 5, 2026
- High7.2Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- Medium4.3PLANKA 2.0.0 lacks X-Frame-Options and CSP frame-ancestors headers, allowing the application to be embedded within malicious iframes.Check if you run itEPSS 0.15%Jan 5, 2026
- Medium6.5Mega-Fence (webgate-lib.*) 25.1.914 and prior trusts the first value of the X-Forwarded-For (XFF) header as the client IP without validating a trusted proxy chain.Check if you run itEPSS 0.27%Jan 5, 2026
- High7.8An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows.Check if you run itEPSS 0.13%Jan 5, 2026
- High8.4An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580.Check if you run itEPSS 0.16%Jan 5, 2026
- High7.1An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500.Check if you run itEPSS 0.13%Jan 5, 2026
- Medium5.1An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500.Check if you run itEPSS 0.17%Jan 5, 2026
- Medium6.2An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500.Check if you run itEPSS 0.13%Jan 5, 2026
- Medium5.1An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500.Check if you run itEPSS 0.10%Jan 5, 2026
- High8.4An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580.Check if you run itEPSS 0.16%Jan 5, 2026
- High7.5An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2400, 1580, 9110, W920, W930, Modem 5123, and Modem 5400.Check if you run itEPSS 0.33%Jan 5, 2026
- Critical9.1An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W10Check if you run itEPSS 0.36%Jan 5, 2026
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Check if you run itEPSS 4.00%Jan 4, 2026
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Check if you run itEPSS 4.00%Jan 4, 2026
- Medium6.9A vulnerability was found in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.43%Jan 4, 2026
- Medium6.9A vulnerability has been found in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.54%Jan 4, 2026
Sort