Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.20%Jul 29, 2025
- Medium6.2A logic issue was addressed with improved checks.Check if you run itEPSS 0.96%Jul 29, 2025
- High7.8This issue was addressed through improved state management.Check if you run itEPSS 0.21%Jul 29, 2025
- High7.1An out-of-bounds access issue was addressed with improved bounds checking.Check if you run itEPSS 0.23%Jul 29, 2025
- Medium5.5An authorization issue was addressed with improved state management.Check if you run itEPSS 0.17%Jul 29, 2025
- Medium5.5An injection issue was addressed with improved validation.Check if you run itEPSS 0.25%Jul 29, 2025
- High8.8The issue was addressed with improved memory handling.Check if you run itEPSS 0.75%Jul 29, 2025
- Critical9.8SonicWall SonicOS Use of Externally-Controlled Format StringPatch nowKEVEPSS 0.94%Jul 29, 2025
- High8.6The go command may execute unexpected commands when operating in untrusted VCS repositories.Check if you run itEPSS 0.44%Jul 29, 2025
- High8.2maptiler tileserver_php Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.40%Jul 29, 2025
- Critical9.8maptiler tileserver_php Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.66%Jul 29, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.66%Jul 29, 2025
- High8.1Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux.Check if you run itEPSS 0.36%Jul 29, 2025
- High8.4In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header.Check if you run itEPSS 0.20%Jul 29, 2025
- Medium6.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.08%Jul 29, 2025
- Medium6.9An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cCheck if you run itEPSS 0.33%Jul 29, 2025
- Medium4.4VMware vCenter contains a denial-of-service vulnerability.Check if you run itEPSS 0.32%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check if you run itEPSS 0.18%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check if you run itEPSS 0.18%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check if you run itEPSS 0.18%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check if you run itEPSS 0.18%Jul 29, 2025
- High8.7SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” paCheck if you run itEPSS 0.32%Jul 29, 2025
- High8.8The Hydra Booking plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the tfhb_reset_password_callback() function in versions 1.1.0 to 1Check if you run itEPSS 0.40%Jul 29, 2025
- Medium6.4The YouTube Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘instance’ parameter in all versions up to, and including, 10.3 due to insufficient inpuCheck if you run itEPSS 0.20%Jul 29, 2025
- Medium6.4The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple widgets in all versions up to, and including, 3.1.4 due to insufficientCheck if you run itEPSS 0.25%Jul 29, 2025
Sort