Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a downstream effect of an already identified vulnerability, CVE-2012-6708.Open the advisoryNov 3, 2025
- Medium5.1Nagios XI versions prior to 5.8.7 using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via the Core UI’s Views URL handling (escape_string()).Check if you run itEPSS 0.44%Nov 3, 2025
- Critical9.4Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain rootCheck if you run itEPSS 1.21%Nov 3, 2025
- Medium6.0Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users whCheck if you run itEPSS 1.04%Nov 3, 2025
- Medium6.8A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.Check if you run itEPSS 0.12%Nov 3, 2025
- Medium6.4IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 001, 24.0.1 through 24.0.1 Interim Fix 004, 24.0.0 through 24.0.0 Interim Fix 006, and earlier unsupported rCheck if you run itEPSS 0.18%Nov 3, 2025
- Medium5.9The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects.Check if you run itEPSS 0.39%Nov 3, 2025
- High7.1IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.Check if you run itEPSS 0.76%Nov 3, 2025
- Medium6.9lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing.Check if you run itEPSS 0.37%Nov 3, 2025
- Low2.3Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform aCheck if you run itEPSS 0.63%Nov 3, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Nov 3, 2025
- Critical9.8An unauthenticated SQL Injection was discovered within the Geutebruck G-Cam E-Series Cameras through the parameter in the script.Check if you run itEPSS 0.56%Nov 3, 2025
- High7.1IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows some IdentityIQ web sCheck if you run itEPSS 0.22%Nov 3, 2025
- Medium4.8IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content or perform unauthorized actions using man in the middle techCheck if you run itEPSS 0.27%Nov 3, 2025
- Medium6.5IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length.Check if you run itEPSS 0.45%Nov 3, 2025
- Medium4.3IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownCheck if you run itEPSS 0.36%Nov 3, 2025
- High8.5A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation procesCheck if you run itEPSS 0.21%Nov 3, 2025
- Critical9.8The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4.Check if you run itEPSS 0.40%Nov 3, 2025
- Medium5.3Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Snow Effect: from n/Check if you run itEPSS 0.23%Nov 3, 2025
- Medium5.3A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd.Check if you run itEPSS 0.45%Nov 3, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled This issue is siCheck if you run itEPSS 0.20%Nov 3, 2025
- Critical9.9Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd.Check if you run itEPSS 0.31%Nov 3, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- High7.1The privileged user could log in without sufficient credentials after enabling an application protocol.Check if you run itEPSS 0.22%Nov 3, 2025
- Low2.3A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032.Check if you run itEPSS 0.33%Nov 3, 2025
Sort