Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the executCheck if you run itEPSS 4.14%Nov 11, 2025
- Critical9.8Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.Check if you run itEPSS 1.81%Nov 11, 2025
- High7.3Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in TurCheck if you run itEPSS 0.29%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.18%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Software High Technology Systems Inc.Check if you run itEPSS 0.20%Nov 11, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High8.8The Blocksy Companion plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, and including, 2.1.19.Check if you run itEPSS 0.73%Nov 11, 2025
- Medium5.3The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment verification to unauthenticated payment bypass in all versions uCheck if you run itEPSS 0.35%Nov 11, 2025
- Medium4.3The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability cCheck if you run itEPSS 0.24%Nov 11, 2025
- Medium5.3The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27.Check if you run itEPSS 0.31%Nov 11, 2025
- Critical10.0The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2.Check if you run itEPSS 1.10%Nov 11, 2025
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report.Check if you run itEPSS 0.53%Nov 11, 2025
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.Check if you run itEPSS 0.52%Nov 11, 2025
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report.Check if you run itEPSS 0.52%Nov 11, 2025
- Medium6.8An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass tCheck if you run itEPSS 0.11%Nov 11, 2025
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report.Check if you run itEPSS 0.52%Nov 11, 2025
- Medium6.4The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges.Check if you run itEPSS 0.12%Nov 11, 2025
- Low3.1It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability.Check if you run itEPSS 0.24%Nov 11, 2025
- Medium4.3The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability.Check if you run itEPSS 0.27%Nov 11, 2025
- High8.4AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system.Check if you run itEPSS 0.13%Nov 11, 2025
Sort