Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.5There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function.Check if you run itEPSS 0.20%Aug 20, 2025
- Medium5.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user,Check if you run itEPSS 0.25%Aug 20, 2025
- Medium5.1Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.31%Aug 20, 2025
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.QCheck if you run itEPSS 0.22%Aug 20, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.QCheck if you run itEPSS 0.19%Aug 20, 2025
- Medium5.4The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0.Check if you run itEPSS 0.17%Aug 20, 2025
- Medium4.3In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script filesCheck if you run itEPSS 0.80%Aug 20, 2025
- Medium5.5In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email contentCheck if you run itEPSS 0.28%Aug 20, 2025
- High7.5In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipCheck if you run itEPSS 0.12%Aug 20, 2025
- High8.7In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram contentCheck if you run itEPSS 0.28%Aug 20, 2025
- Medium5.2In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCheck if you run itEPSS 0.43%Aug 20, 2025
- Medium6.5In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server startCheck if you run itEPSS 0.13%Aug 20, 2025
- Medium6.5In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden filesCheck if you run itEPSS 0.25%Aug 20, 2025
- Medium4.7In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCheck if you run itEPSS 0.20%Aug 20, 2025
- Medium6.3CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g.Check if you run itEPSS 0.40%Aug 20, 2025
- Medium5.3Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file pathCheck if you run itEPSS 0.29%Aug 20, 2025
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in Pik Online Yazılım Çözümleri A.Ş.Check if you run itEPSS 0.33%Aug 20, 2025
- Medium4.3MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended onlyCheck if you run itEPSS 0.21%Aug 20, 2025
- High8.6Server-Side Request Forgery (SSRF) vulnerability in Pik Online Yazılım Çözümleri A.Ş.Check if you run itEPSS 0.28%Aug 20, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in ads.txt Guru ads.txt Guru Connect adstxt-guru-connect allows Cross Site Request Forgery.This issue affects ads.txt Guru Connect:Check if you run itEPSS 0.16%Aug 20, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Solutions Notice Bar notice-bar allows Stored XSS.This issue affects NoticCheck if you run itEPSS 0.20%Aug 20, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in DexignZone JobZilla - Job Board WordPress Theme jobzilla allows Privilege Escalation.This issue affects JobZilla - Job Board WordCheck if you run itEPSS 0.18%Aug 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Cross Site Request Forgery.This issue affects Sign-up Sheets: from n/a throughCheck if you run itEPSS 0.13%Aug 20, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Icons themify-icons allows Stored XSS.This issue affects TheCheck if you run itEPSS 0.20%Aug 20, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Audio Dock themify-audio-dock allows Stored XSS.This issue aCheck if you run itEPSS 0.22%Aug 20, 2025
Sort