Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8nootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- Critical10.0Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete contrCheck if you run itEPSS 0.36%Oct 31, 2025
- Low3.1QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero).Check if you run itEPSS 0.19%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- Medium5.4LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the endpoint.Check if you run itEPSS 0.35%Oct 30, 2025
- Critical10.0A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.Check if you run itEPSS 0.85%Oct 30, 2025
- High7.3This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a malicious file.Check if you run itEPSS 0.18%Oct 30, 2025
- Medium6.3A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver version 5.5.2.Check if you run itEPSS 1.47%Oct 30, 2025
- High8.8A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.Check if you run itEPSS 1.04%Oct 30, 2025
- Critical10.0ui unifi_access Missing Authentication for Critical FunctionPatch nowKEVEPSS 41.09%Oct 30, 2025
- High7.3A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled.Check if you run itEPSS 0.24%Oct 30, 2025
- Medium6.5In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attCheck if you run itEPSS 0.33%Oct 30, 2025
- High8.8SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in usersCheck if you run itEPSS 1.00%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of xiwindow variables used to build permalinks in the web interface.Check if you run itEPSS 0.61%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via the Views feature URL handling.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.4.13 are vulnerable to cross-site scripting (XSS) via the Views page of the web interface.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2012R2.6 are vulnerable to cross-site scripting (XSS) via the Tools Menu of the web interface.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages.Check if you run itEPSS 0.44%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Reports interface through values from the startdate and enddate fields.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the recurring downtime script of the web interface.Check if you run itEPSS 0.47%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.0 are vulnerable to stored cross-site scripting (XSS) via the My Tools page.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the “My Reports” listing of the web interface.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Menu System of the web interface.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin interface.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component.Check if you run itEPSS 0.59%Oct 30, 2025
Sort