Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1This issue was addressed with additional entitlement checks.Check if you run itEPSS 0.23%Sep 15, 2025
- Medium4.0The issue was addressed with improved handling of caches.Check if you run itEPSS 0.23%Sep 15, 2025
- Medium5.5An out-of-bounds access issue was addressed with improved bounds checking.Check if you run itEPSS 0.24%Sep 15, 2025
- Medium5.4This issue was addressed with improved URL validation.Check if you run itEPSS 0.56%Sep 15, 2025
- Medium4.0This issue was addressed with improved checks to prevent unauthorized actions.Check if you run itEPSS 0.19%Sep 15, 2025
- Medium4.0A path handling issue was addressed with improved validation.Check if you run itEPSS 0.34%Sep 15, 2025
- Medium6.5The issue was addressed by adding additional logic.Check if you run itEPSS 0.50%Sep 15, 2025
- Medium5.1A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.20%Sep 15, 2025
- Medium4.0A downgrade issue was addressed with additional code-signing restrictions.Check if you run itEPSS 0.19%Sep 15, 2025
- Medium5.5An out-of-bounds read was addressed with improved bounds checking.Check if you run itEPSS 0.21%Sep 15, 2025
- Medium5.3A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489.Check if you run itEPSS 0.44%Sep 15, 2025
- Medium5.3A flaw has been found in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.43%Sep 15, 2025
- Medium6.9A vulnerability was detected in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.53%Sep 15, 2025
- Medium5.3A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.43%Sep 15, 2025
- Medium4.8Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/ API endpoint in Liferay Portal 7.4.3.51 through 7.4.3.109, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7Check if you run itEPSS 0.27%Sep 15, 2025
- Medium5.3A weakness has been identified in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.35%Sep 15, 2025
- Medium5.3In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versionCheck if you run itEPSS 0.25%Sep 15, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration.Check if you run itEPSS 0.48%Sep 15, 2025
- Medium6.9An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and performCheck if you run itEPSS 0.45%Sep 15, 2025
- Medium6.6FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.46%Sep 15, 2025
- Medium6.9A security flaw has been discovered in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.43%Sep 15, 2025
- Medium6.3FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.44%Sep 15, 2025
- Low2.1Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times durCheck if you run itEPSS 0.18%Sep 15, 2025
- High8.8color-name is a JSON with CSS color names.Check if you run itEPSS 0.55%Sep 15, 2025
- Medium5.3A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464.Check if you run itEPSS 0.34%Sep 15, 2025
Sort