Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.50%Oct 30, 2025
- Medium6.8The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditionsCheck if you run itEPSS 0.18%Oct 30, 2025
- Low2.1Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .Check if you run itEPSS 0.21%Oct 30, 2025
- Critical10.0Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .Check if you run itEPSS 0.37%Oct 30, 2025
- Critical10.0Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .Check if you run itEPSS 0.37%Oct 30, 2025
- Medium5.4Dell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20.Check if you run itEPSS 0.21%Oct 30, 2025
- Medium4.3Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internCheck if you run itEPSS 0.30%Oct 30, 2025
- Medium6.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium6.3Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.Check if you run itEPSS 0.45%Oct 30, 2025
- High7.8Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.57%Oct 30, 2025
- Medium4.3Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.Check if you run itEPSS 1.14%Oct 30, 2025
- High7.8Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.50%Oct 30, 2025
- High7.8Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.92%Oct 30, 2025
- Critical9.8A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security CCheck if you run itEPSS 0.36%Oct 30, 2025
- High7.8Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.57%Oct 30, 2025
- High7.8Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.57%Oct 30, 2025
- High7.2Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.69%Oct 30, 2025
- Medium5.1URVE Smart Office is vulnerable to Stored XSS in report problem functionality.Check if you run itEPSS 0.35%Oct 30, 2025
- Medium5.1Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality.Check if you run itEPSS 0.21%Oct 30, 2025
- Critical9.3A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fCheck if you run itEPSS 0.29%Oct 30, 2025
- High8.5Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central siteCheck if you run itEPSS 0.60%Oct 30, 2025
- High8.7A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the pCheck if you run itEPSS 0.29%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vfs: Don't leak disconnected dentries on umount When user calls open_by_handle_at() on some inode that is not caCheck if you run itEPSS 0.17%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in theCheck if you run itEPSS 0.15%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink Fix three refcount inconsistency issues related to .Check if you run itEPSS 0.21%Oct 30, 2025
Sort