Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability.Check if you run itEPSS 1.07%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table.Check if you run itEPSS 0.51%Oct 30, 2025
- High8.7Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted chCheck if you run itEPSS 0.74%Oct 30, 2025
- Medium6.9Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import.Check if you run itEPSS 0.63%Oct 30, 2025
- Medium5.1Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages.Check if you run itEPSS 0.52%Oct 30, 2025
- Medium5.1Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter.Check if you run itEPSS 0.52%Oct 30, 2025
- Medium6.0Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of attacker-coCheck if you run itEPSS 0.89%Oct 30, 2025
- Medium6.2Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration.Check if you run itEPSS 0.82%Oct 30, 2025
- Medium6.2Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings.Check if you run itEPSS 1.00%Oct 30, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2025-60424.Open the advisoryOct 30, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2025-60425.Open the advisoryOct 30, 2025
- Low3.1In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow.Check if you run itEPSS 0.41%Oct 30, 2025
- High8.6IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.42%Oct 30, 2025
- High7.5IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.53%Oct 30, 2025
- High7.2IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintCheck if you run itEPSS 0.35%Oct 30, 2025
- Medium4.8Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10Check if you run itEPSS 0.22%Oct 30, 2025
- Medium6.1node-tar is a Tar for Node.js.Check if you run itEPSS 0.13%Oct 30, 2025
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.30%Oct 30, 2025
- Medium5.1Movary is a web application to track, rate and explore your movie watch history.Check if you run itEPSS 0.26%Oct 30, 2025
- Medium5.1By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 202Check if you run itEPSS 0.23%Oct 30, 2025
- Medium5.1Movary is a web application to track, rate and explore your movie watch history.Check if you run itEPSS 0.25%Oct 30, 2025
- High8.9The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack.Check if you run itEPSS 0.63%Oct 30, 2025
- High8.8CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft runningCheck if you run itEPSS 0.52%Oct 30, 2025
- High7.1JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.29%Oct 30, 2025
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.81%Oct 30, 2025
Sort