Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://Check if you run itEPSS 0.77%Dec 18, 2025
- Medium5.3Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.Check if you run itEPSS 0.72%Dec 18, 2025
- High7.7BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup.Check if you run itEPSS 0.31%Dec 18, 2025
- High7.7BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections.Check if you run itEPSS 0.34%Dec 18, 2025
- Medium5.3Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.Check if you run itEPSS 0.33%Dec 18, 2025
- Medium5.3Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.Check if you run itEPSS 0.66%Dec 18, 2025
- Medium5.3BullWall Ransomware Containment considers the number of files modified to trigger detection.Check if you run itEPSS 0.29%Dec 18, 2025
- High8.7Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.Check if you run itEPSS 0.62%Dec 18, 2025
- High8.7BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance.Check if you run itEPSS 0.35%Dec 18, 2025
- Medium6.9BullWall Ransomware Containment may not always detect an encrypted file.Check if you run itEPSS 0.21%Dec 18, 2025
- High7.2Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.Check if you run itEPSS 0.94%Dec 18, 2025
- Medium5.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.Check if you run itEPSS 0.22%Dec 18, 2025
- High7.3Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restCheck if you run itEPSS 0.25%Dec 18, 2025
- Medium5.3A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0.Check if you run itEPSS 0.29%Dec 18, 2025
- High8.4Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system commands by crafting a malicious markdown file.Check if you run itEPSS 0.20%Dec 18, 2025
- High8.5Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library.Check if you run itEPSS 0.22%Dec 18, 2025
- Medium5.1A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox form component.Check if you run itEPSS 0.17%Dec 18, 2025
- Medium5.1A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configuration.Check if you run itEPSS 0.17%Dec 18, 2025
- Medium5.1A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form validation rule configuration.Check if you run itEPSS 0.17%Dec 18, 2025
- Medium6.9An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication.Check if you run itEPSS 0.27%Dec 18, 2025
- Medium5.1A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Pages dashboard widget configuration dialog.Check if you run itEPSS 0.19%Dec 18, 2025
- Medium5.1A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders.Check if you run itEPSS 0.17%Dec 18, 2025
- Medium6.9A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when setting administration cookies via web.config.Check if you run itEPSS 0.19%Dec 18, 2025
- High7.1EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager rCheck if you run itEPSS 0.95%Dec 18, 2025
- Medium6.9GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses.Check if you run itEPSS 0.35%Dec 18, 2025
Sort