Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of ServiceCheck if you run itEPSS 0.13%Aug 28, 2025
- Critical9.1Valtimo is a platform for Business Process Automation.Check if you run itEPSS 0.40%Aug 28, 2025
- Medium5.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.38%Aug 28, 2025
- Medium5.4A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload proCheck if you run itEPSS 0.21%Aug 28, 2025
- Medium5.3HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.Check if you run itEPSS 0.10%Aug 28, 2025
- Medium6.5HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access tCheck if you run itEPSS 0.09%Aug 28, 2025
- Medium5.5In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 informationCheck if you run itEPSS 0.22%Aug 28, 2025
- High8.1In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselvesCheck if you run itEPSS 0.29%Aug 28, 2025
- Medium4.3Contao is an Open Source CMS.Check if you run itEPSS 0.26%Aug 28, 2025
- Medium4.3Contao is an Open Source CMS.Check if you run itEPSS 0.26%Aug 28, 2025
- Medium5.3Contao is an Open Source CMS.Check if you run itEPSS 0.32%Aug 28, 2025
- Medium5.3Contao is an Open Source CMS.Check if you run itEPSS 0.30%Aug 28, 2025
- Medium6.5Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to access all Kibana Spaces.Check if you run itEPSS 0.28%Aug 28, 2025
- High8.7Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface.Check if you run itEPSS 1.75%Aug 28, 2025
- High7.5Asterisk is an open source private branch exchange and telephony toolkit.Check if you run itEPSS 0.43%Aug 28, 2025
- Medium6.9lychee link checking action checks links in Markdown, HTML, and text files using lychee.Check if you run itEPSS 0.37%Aug 28, 2025
- High8.5A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system.Check if you run itEPSS 0.65%Aug 28, 2025
- Medium5.4IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting.Check if you run itEPSS 0.18%Aug 28, 2025
- High7.8Local privilege escalation due to insecure folder permissions.Check if you run itEPSS 0.13%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- High8.8Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.4.8.Check if you run itEPSS 0.37%Aug 28, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a thrCheck if you run itEPSS 0.42%Aug 28, 2025
Sort