Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Capsule is a multi-tenancy and policy-based framework for Kubernetes.Check if you run itEPSS 0.46%Aug 18, 2025
- High8.5Copier library and CLI app for rendering project templates.Check if you run itEPSS 0.26%Aug 18, 2025
- Critical9.1NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.39%Aug 18, 2025
- High7.2NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.39%Aug 18, 2025
- Medium5.3NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.43%Aug 18, 2025
- Medium6.2IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communCheck if you run itEPSS 0.18%Aug 18, 2025
- High7.5IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resourceCheck if you run itEPSS 0.40%Aug 18, 2025
- Medium5.4IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limCheck if you run itEPSS 0.21%Aug 18, 2025
- Medium5.9IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.Check if you run itEPSS 0.33%Aug 18, 2025
- Low3.7IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information without proper filtering.Check if you run itEPSS 0.24%Aug 18, 2025
- High8.8IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resouCheck if you run itEPSS 0.30%Aug 18, 2025
- High7.7An Insecure Direct Object Reference (IDOR) vulnerability was identified in the endpoint of the Lunary API, affecting versions up to 0.8.8.Check if you run itEPSS 0.24%Aug 18, 2025
- Medium4.8Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Check if you run itEPSS 0.25%Aug 18, 2025
- Low2.3A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7 allows a remote authenticated attacker to inject JCheck if you run itEPSS 0.22%Aug 18, 2025
- Medium5.9Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.Check if you run itEPSS 2.13%Aug 18, 2025
- High7.1An out-of-bounds write vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.38%Aug 18, 2025
- High7.0CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leadinCheck if you run itEPSS 0.22%Aug 18, 2025
- High8.7CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device.Check if you run itEPSS 0.50%Aug 18, 2025
- Medium5.9DIAEnergie - Reflected Cross-site ScriptingCheck if you run itEPSS 0.16%Aug 18, 2025
- Medium5.9DIAEnergie - Reflected Cross-site ScriptingCheck if you run itEPSS 0.16%Aug 18, 2025
- Medium5.9DIAEnergie - Reflected Cross-site ScriptingCheck if you run itEPSS 0.16%Aug 18, 2025
- High7.0DIAEnergie - Stored Cross-site ScriptingCheck if you run itEPSS 0.18%Aug 18, 2025
- Medium6.3A security flaw has been discovered in Portabilis i-Diario up to 1.5.0.Check if you run itEPSS 0.42%Aug 18, 2025
- Medium5.3Affected is an unknown function of the component Login Page.Check if you run itEPSS 0.33%Aug 18, 2025
- Medium5.3A vulnerability was determined in Portabilis i-Diario up to 1.5.0.Check if you run itEPSS 0.42%Aug 18, 2025
Sort