Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.18%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.19%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- High8.6In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID thatCheck if you run itEPSS 0.47%Oct 22, 2025
- High7.5Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.Check this weekEPSS 10.74%Oct 22, 2025
- Medium5.3Nautobot Single Source of Truth (SSoT) is an app for Nautobot.Check if you run itEPSS 0.29%Oct 22, 2025
- Low2.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows CrossCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium6.7NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.Check if you run itEPSS 0.18%Oct 22, 2025
- High8.8my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view.Check if you run itEPSS 0.40%Oct 22, 2025
- High7.9OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.26%Oct 22, 2025
- High7.9OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.19%Oct 22, 2025
- Medium6.3In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories,Check if you run itEPSS 0.50%Oct 22, 2025
- Low2.3In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escapinCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTCheck if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.Check if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP TrCheck if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a thCheck if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issueCheck if you run itEPSS 0.18%Oct 22, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functiCheck if you run itEPSS 0.42%Oct 22, 2025
Sort