Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A weakness has been identified in diyhi bbs up to 6.8.Check if you run itEPSS 0.38%Aug 26, 2025
- Medium6.9A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.44%Aug 26, 2025
- High8.7A flaw has been found in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.80%Aug 26, 2025
- Medium5.3A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.36%Aug 26, 2025
- High7.0An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another rCheck if you run itEPSS 0.31%Aug 26, 2025
- Medium5.3A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.36%Aug 26, 2025
- Medium5.3A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.38%Aug 26, 2025
- Medium5.3A vulnerability was found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.43%Aug 26, 2025
- Medium5.3A vulnerability has been found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.38%Aug 26, 2025
- Medium5.3A flaw has been found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.38%Aug 26, 2025
- Medium4.8A vulnerability was detected in mtons mblog up to 3.5.0.Check if you run itEPSS 0.28%Aug 26, 2025
- Critical9.2Citrix NetScaler Memory Overflow VulnerabilityPatch nowKEVEPSS 20.67%Aug 26, 2025
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' anCheck if you run itEPSS 0.29%Aug 26, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2.Check if you run itEPSS 0.87%Aug 26, 2025
- Critical9.1n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.pyCheck if you run itEPSS 0.82%Aug 26, 2025
- Critical9.1Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are stored in plaintext within log files on thCheck if you run itEPSS 0.24%Aug 26, 2025
- Critical9.8An arbitrary code execution vulnerability in Badaso CMS 2.9.11.Check if you run itEPSS 0.65%Aug 26, 2025
- Medium6.5SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability.Check if you run itEPSS 0.24%Aug 26, 2025
- High7.5SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection.Check if you run itEPSS 0.27%Aug 26, 2025
- Medium5.4SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection.Check if you run itEPSS 0.19%Aug 26, 2025
- Medium6.1Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion.Check if you run itEPSS 0.34%Aug 26, 2025
- Medium6.1A vulnerability has been found in NotesCMS and classified as medium.Check if you run itEPSS 0.19%Aug 26, 2025
- Medium6.1A vulnerability has been found in NotesCMS and classified as medium.Check if you run itEPSS 0.21%Aug 26, 2025
- Medium6.1A vulnerability in NotesCMS and specifically in the page /index.php?route=notes.Check if you run itEPSS 0.21%Aug 26, 2025
- Medium6.1IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, resulting in a reflectedCheck if you run itEPSS 0.23%Aug 26, 2025
Sort