Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- High8.1There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by ZohoCheck if you run itEPSS 0.27%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- High7.0The StrongDM macOS client incorrectly processed JSON-formatted messages.Check if you run itEPSS 0.16%Aug 20, 2025
- High8.5The StrongDM Windows service incorrectly handled communication related to system certificate management.Check if you run itEPSS 0.08%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- High8.5The StrongDM Windows service incorrectly handled input validation.Check if you run itEPSS 0.15%Aug 20, 2025
- High8.5The StrongDM Client insufficiently protected a pre-authentication token.Check if you run itEPSS 0.11%Aug 20, 2025
- High8.4Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary.Check if you run itEPSS 0.40%Aug 20, 2025
- High7.3AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.20%Aug 20, 2025
- Medium4.9A vulnerability in the debug logging function of Cisco Duo Authentication Proxy could allow an authenticated, high-privileged, remote attacker to view sensitive information in a syCheck if you run itEPSS 0.48%Aug 20, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privilegCheck if you run itEPSS 0.43%Aug 20, 2025
- Critical9.8AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability.Check if you run itEPSS 0.65%Aug 20, 2025
- Critical9.8AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability.Check if you run itEPSS 0.65%Aug 20, 2025
- Medium5.9A vulnerability was found in the Cryostat HTTP API.Check if you run itEPSS 0.33%Aug 20, 2025
- High8.5Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser.Check if you run itEPSS 0.41%Aug 20, 2025
- Critical9.3Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality.Check if you run itEPSS 3.76%Aug 20, 2025
- High8.6SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header.Check if you run itEPSS 1.20%Aug 20, 2025
- High8.7Solar FTP Server fails to properly handle format strings passed to the USER command.Check if you run itEPSS 1.08%Aug 20, 2025
- High8.7Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem.Check if you run itEPSS 1.80%Aug 20, 2025
- High8.7The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object.Check if you run itEPSS 1.64%Aug 20, 2025
- High8.7Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command.Check if you run itEPSS 1.48%Aug 20, 2025
- High8.4MJM QuickPlayer (also known as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file.Check if you run itEPSS 0.41%Aug 20, 2025
- High8.4MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files.Check if you run itEPSS 0.42%Aug 20, 2025
- High8.4Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files.Check if you run itEPSS 0.41%Aug 20, 2025
Sort