Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A flaw has been found in lostvip-com ruoyi-go up to 2.1.Check if you run itEPSS 0.50%Aug 25, 2025
- Medium6.1Craft is a platform for creating digital experiences.Check if you run itEPSS 0.94%Aug 25, 2025
- High8.7Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel.Check if you run itEPSS 0.40%Aug 25, 2025
- Medium5.3A vulnerability was detected in lostvip-com ruoyi-go up to 2.1.Check if you run itEPSS 0.37%Aug 25, 2025
- Medium5.3A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1.Check if you run itEPSS 0.37%Aug 25, 2025
- High8.2DataEase is an open source business intelligence and data visualization tool.Check this weekEPSS 10.89%Aug 25, 2025
- High8.2DataEase is an open source business intelligence and data visualization tool.Check if you run itEPSS 9.69%Aug 25, 2025
- Medium5.3A weakness has been identified in lostvip-com ruoyi-go up to 2.1.Check if you run itEPSS 0.37%Aug 25, 2025
- High8.8Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.54%Aug 25, 2025
- High7.2Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants.Check if you run itEPSS 0.27%Aug 25, 2025
- Critical9.4A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directorieCheck this weekEPSS 11.68%Aug 25, 2025
- High7.5An unauthenticated unrestricted file upload vulnerability allows an attacker to upload malicious binaries and scripts to the server.Check this weekEPSS 14.97%Aug 25, 2025
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 35.11%Aug 25, 2025
- Medium5.3A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1.Check if you run itEPSS 0.80%Aug 25, 2025
- High8.5A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager.Check if you run itEPSS 0.30%Aug 25, 2025
- Medium6.7The Scratch Channel is a news website.Check if you run itEPSS 0.18%Aug 25, 2025
- High8.6A denial of service vulnerability exists in the JSONReader component of the run-llama/llama_index repository, specifically in version v0.12.37.Check if you run itEPSS 0.29%Aug 25, 2025
- High8.7PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.82%Aug 25, 2025
- High8.8Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra.Check if you run itEPSS 0.52%Aug 25, 2025
- Medium5.1A flaw has been found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.26%Aug 25, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Kevin Langley Jr.Check if you run itEPSS 0.12%Aug 25, 2025
- Medium6.5The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter.Check if you run itEPSS 0.44%Aug 25, 2025
- Critical9.3Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service.Check if you run itEPSS 0.28%Aug 25, 2025
- High7.3An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers (Windows).Check if you run itEPSS 0.15%Aug 25, 2025
- Critical10.0A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories viCheck if you run itEPSS 0.68%Aug 25, 2025
Sort