Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 3Check if you run itEPSS 0.26%Sep 15, 2025
- High8.63DAlloy is a lightWeight 3D-viewer for MediaWiki.Check if you run itEPSS 0.38%Sep 15, 2025
- Medium5.9Openfire is an XMPP server licensed under the Open Source Apache License.Check if you run itEPSS 0.23%Sep 15, 2025
- Medium6.8A weakness has been identified in SpyShelter up to 15.4.0.1015.Check if you run itEPSS 0.15%Sep 15, 2025
- High8.8is-arrayish checks if an object can be used like an Array.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8error-ex allows error subclassing and stack customization.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8color-convert provides plain color conversion functions in JavaScript.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8color-string is a parser and generator for CSS color strings.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8debug is a JavaScript debugging utility.Check if you run itEPSS 0.48%Sep 15, 2025
- High8.8color is a Javascript color conversion and manipulation library.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8simple-swizzle swizzles function arguments.Check if you run itEPSS 0.41%Sep 15, 2025
- High8.8backlash parses collected strings with escapes.Check if you run itEPSS 0.41%Sep 15, 2025
- Medium4.8Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 9Check if you run itEPSS 0.23%Sep 15, 2025
- Medium5.3A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1.Check if you run itEPSS 0.41%Sep 15, 2025
- Medium6.9A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6.Check if you run itEPSS 0.84%Sep 15, 2025
- Medium4.8Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 andCheck if you run itEPSS 0.22%Sep 15, 2025
- Medium6.9hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants.Check if you run itEPSS 0.36%Sep 15, 2025
- Medium5.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.24%Sep 15, 2025
- Medium5.3drawnix is an all in one open-source whiteboard tool.Check if you run itEPSS 0.46%Sep 15, 2025
- Medium5.3A vulnerability was detected in ZKEACMS 4.3.Check if you run itEPSS 0.31%Sep 15, 2025
- High8.5Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution.Check if you run itEPSS 0.20%Sep 15, 2025
- Low2.3Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA tCheck if you run itEPSS 0.32%Sep 15, 2025
- High8.7Dataease is an open source data analytics and visualization platform.Check if you run itEPSS 0.83%Sep 15, 2025
- High7.8The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijCheck if you run itEPSS 0.12%Sep 15, 2025
- High8.7Dataease is an open-source data visualization and analysis platform.Check if you run itEPSS 1.43%Sep 15, 2025
Sort