Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0.Check if you run itEPSS 0.40%Jul 25, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015.Check if you run itEPSS 1.31%Jul 25, 2025
- High8.7A vulnerability classified as critical has been found in D-Link DIR-513 1.10.Check if you run itEPSS 2.20%Jul 25, 2025
- High8.7A vulnerability was found in D-Link DIR-513 1.10.Check if you run itEPSS 2.20%Jul 25, 2025
- Medium5.1A vulnerability was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.39%Jul 25, 2025
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityCheck if you run itEPSS 0.68%Jul 25, 2025
- Medium5.3Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing.Check if you run itEPSS 0.37%Jul 25, 2025
- High8.2Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing.Check if you run itEPSS 0.34%Jul 25, 2025
- Medium6.9A vulnerability was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.64%Jul 25, 2025
- High8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source moduCheck if you run itEPSS 0.49%Jul 25, 2025
- High8.1Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (dataCheck if you run itEPSS 0.42%Jul 25, 2025
- High8.1Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface ManipulationCheck if you run itEPSS 0.42%Jul 25, 2025
- High8.0Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to thCheck if you run itEPSS 0.27%Jul 25, 2025
- Medium5.3A vulnerability was found in code-projects Food Review System 1.0 and classified as critical.Check if you run itEPSS 0.59%Jul 25, 2025
- Medium5.3A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical.Check if you run itEPSS 0.48%Jul 25, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3.Check if you run itEPSS 0.51%Jul 25, 2025
- Medium6.5A flaw was found in the SFTP server message decoding logic of libssh.Check if you run itEPSS 1.03%Jul 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3.Check if you run itEPSS 0.53%Jul 25, 2025
- Medium6.3Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.Check if you run itEPSS 0.19%Jul 25, 2025
- High8.3Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.Check if you run itEPSS 0.49%Jul 25, 2025
- Medium5.3A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3.Check if you run itEPSS 0.53%Jul 25, 2025
- Medium6.0Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensitive print job information.Check if you run itEPSS 1.10%Jul 25, 2025
- Medium6.9Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev.Check if you run itEPSS 0.56%Jul 25, 2025
- Critical10.0An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier.Check if you run itEPSS 2.56%Jul 25, 2025
- High8.4A client-side security misconfiguration vulnerability exists in OpenBlow whistleblowing platform across multiple versions and default deployments, due to the absence of critical HTCheck if you run itEPSS 0.19%Jul 25, 2025
Sort