Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3Check if you run itEPSS 0.13%Oct 31, 2025
- Medium6.2A stack-based buffer overflow was found in the QEMU e1000 network device.Check if you run itEPSS 0.18%Oct 31, 2025
- Medium6.3Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.6When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device.Check if you run itEPSS 0.32%Oct 31, 2025
- Medium6.3A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1.Check if you run itEPSS 0.79%Oct 31, 2025
- Medium5.1A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1.Check if you run itEPSS 0.29%Oct 31, 2025
- High8.7ELOG allows an authenticated user to modify another user's profile.Check if you run itEPSS 0.38%Oct 31, 2025
- Critical9.3ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service.Check if you run itEPSS 0.32%Oct 31, 2025
- High8.6ELOG allows an authenticated user to upload arbitrary HTML files.Check if you run itEPSS 0.32%Oct 31, 2025
- Medium4.6Multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 throughCheck if you run itEPSS 0.23%Oct 31, 2025
- Medium5.1Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 througCheck if you run itEPSS 0.24%Oct 31, 2025
- Medium4.8Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.Check if you run itEPSS 3.26%Oct 31, 2025
- Low1.8If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.Check if you run itEPSS 0.15%Oct 31, 2025
- Medium6.9Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.37%Oct 31, 2025
- High8.4On a client with an admin user, a Global_Shipping script can be implemented.Check if you run itEPSS 0.29%Oct 31, 2025
- High8.4When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted.Check if you run itEPSS 0.20%Oct 31, 2025
- High8.8The service Bizerba Communication Server (BCS) has an unquoted service path.Check if you run itEPSS 0.14%Oct 31, 2025
- Critical10.0Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.22%Oct 31, 2025
- Medium6.9Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.34%Oct 31, 2025
- Medium5.3By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehiclCheck if you run itEPSS 0.79%Oct 31, 2025
- High7.1Agno is a multi-agent framework, runtime and control plane.Check if you run itEPSS 0.16%Oct 31, 2025
- Critical9.2The equipment initially can be configured using the manufacturer's application, by Wi-Fi, by the web server or with the manufacturer’s software.Check if you run itEPSS 0.40%Oct 31, 2025
- High8.3The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol.Check if you run itEPSS 0.25%Oct 31, 2025
- Critical9.2Denial of service of the web server through specific requests to this protocolCheck if you run itEPSS 0.37%Oct 31, 2025
- Medium5.1The web application is vulnerable to a so-called ‘clickjacking’ attack.Check if you run itEPSS 0.39%Oct 31, 2025
Sort