Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure.Check if you run itEPSS 0.30%Jul 29, 2025
- Critical9.1Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend.Check if you run itEPSS 0.43%Jul 29, 2025
- Medium5.3The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on process_external_asset_urls function as well as missing path valCheck if you run itEPSS 0.29%Jul 29, 2025
- Medium6.4The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'data-uuid' attribute in all versions up to, and including,Check if you run itEPSS 0.25%Jul 29, 2025
- Medium6.4The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'data-uuid' attribute in all versions up to, and including,Check if you run itEPSS 0.25%Jul 29, 2025
- Critical9.8langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component.Check if you run itEPSS 0.78%Jul 29, 2025
- Medium6.5An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.Check if you run itEPSS 0.33%Jul 29, 2025
- High8.8An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing.Check if you run itEPSS 3.55%Jul 28, 2025
- Medium5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.Check if you run itEPSS 5.92%Jul 28, 2025
- Medium6.5An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user.Check if you run itEPSS 8.54%Jul 28, 2025
- Medium5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.Check this weekEPSS 10.22%Jul 28, 2025
- Medium5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.Check this weekEPSS 10.22%Jul 28, 2025
- Medium6.9Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate.Check if you run itEPSS 0.54%Jul 28, 2025
- Critical9.8RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language.Check if you run itEPSS 0.53%Jul 28, 2025
- Medium6.9Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate.Check if you run itEPSS 0.66%Jul 28, 2025
- Critical9.9Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate.Check if you run itEPSS 0.37%Jul 28, 2025
- Medium5.4copyparty is a portable file server.Check if you run itEPSS 0.47%Jul 28, 2025
- Critical10.0A SAML library not dependent on any frameworks that runs in Node.Check if you run itEPSS 0.38%Jul 28, 2025
- High7.5There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs.Check if you run itEPSS 0.76%Jul 28, 2025
- Low3.7A vulnerability was found in the netavark package, a network stack for containers used with Podman.Check if you run itEPSS 0.36%Jul 28, 2025
- Medium5.9A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation.Check if you run itEPSS 0.29%Jul 28, 2025
- Critical9.4A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered.Check if you run itEPSS 0.48%Jul 28, 2025
- Medium5.4DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture.Check if you run itEPSS 0.17%Jul 28, 2025
- Medium5.5In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" commandCheck if you run itEPSS 0.29%Jul 28, 2025
- Medium5.5In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshotsCheck if you run itEPSS 0.29%Jul 28, 2025
Sort