Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0.Check if you run itEPSS 0.46%Oct 28, 2025
- Medium6.9A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0.Check if you run itEPSS 0.46%Oct 28, 2025
- Medium5.5Uncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Oct 28, 2025
- High7.5An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the "pre-resource" option in bes-web.xml.Check if you run itEPSS 0.36%Oct 28, 2025
- High7.5Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.Check if you run itEPSS 0.32%Oct 28, 2025
- Critical9.8zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.Check if you run itEPSS 0.53%Oct 28, 2025
- High7.5Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot.Check if you run itEPSS 0.26%Oct 28, 2025
- High7.5An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver.Check if you run itEPSS 0.35%Oct 28, 2025
- High8.8alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted file upload.Check if you run itEPSS 0.60%Oct 28, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.71%Oct 28, 2025
- High8.7A flaw has been found in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.79%Oct 27, 2025
- Medium5.1A vulnerability was determined in code-projects Food Ordering System 1.0.Check if you run itEPSS 0.41%Oct 27, 2025
- Medium5.1A vulnerability was found in code-projects Food Ordering System 1.0.Check if you run itEPSS 0.36%Oct 27, 2025
- UnknownFurther research determined the issue is not a vulnerability.Check if you run itEPSS 0.00%Oct 27, 2025
- High8.3Constellation is the first Confidential Kubernetes.Check if you run itEPSS 0.11%Oct 27, 2025
- Medium4.8A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.26%Oct 27, 2025
- Medium4.8A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.26%Oct 27, 2025
- High7.8IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.Check if you run itEPSS 0.13%Oct 27, 2025
- Medium4.8A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.26%Oct 27, 2025
- Medium5.3Improper Resource Shutdown or Release vulnerability in Apache Tomcat.Check if you run itEPSS 1.25%Oct 27, 2025
- High7.5Relative Path Traversal vulnerability in Apache Tomcat.Check this weekEPSS 64.41%Oct 27, 2025
- Critical9.6Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.Check this weekEPSS 10.17%Oct 27, 2025
- High8.6rocketsoftware trufusion_enterprise Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.00%Oct 27, 2025
- Medium5.1A security vulnerability has been detected in D-Link DAP-2695 2.00RC13.Check if you run itEPSS 7.03%Oct 27, 2025
- High7.6A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.Check if you run itEPSS 0.71%Oct 27, 2025
Sort