Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.50%Oct 2, 2025
- Medium6.9A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects TumbleweCheck if you run itEPSS 0.17%Oct 2, 2025
- Medium6.3An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 throCheck if you run itEPSS 0.25%Oct 2, 2025
- Medium6.3Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd.Check if you run itEPSS 0.26%Oct 2, 2025
- Medium5.3An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0.Check if you run itEPSS 0.26%Oct 2, 2025
- Low2.3Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team.Check if you run itEPSS 0.21%Oct 2, 2025
- Medium5.1Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra.Check if you run itEPSS 0.33%Oct 2, 2025
- High7.6A vulnerability has been identified within Rancher Manager where a missing server-side validation on the field in Rancher can allow users with update permissions on other User resoCheck if you run itEPSS 0.46%Oct 2, 2025
- High8.0A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks.Check if you run itEPSS 0.24%Oct 2, 2025
- Critical9.3Incorrect authentication vulnerability in OpenSIAC, which could allow an attacker to impersonate a person using Cl@ve as an authentication method.Check if you run itEPSS 0.36%Oct 2, 2025
- Medium5.1Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameterCheck if you run itEPSS 0.36%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/uploaCheck if you run itEPSS 0.21%Oct 2, 2025
- High7.1Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted logCheck if you run itEPSS 0.59%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/createCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/adCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium4.7A vulnerability has been identified within Rancher Manager whereby headers are being sent to an external entity, for example , via the Rancher endpoint.Check if you run itEPSS 0.36%Oct 2, 2025
- High7.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.Check if you run itEPSS 1.30%Oct 2, 2025
- Medium5.9Exposure of sensitive information in Viday.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7Exposure of sensitive information in Viday.Check if you run itEPSS 0.34%Oct 2, 2025
- Medium4.8Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted reCheck if you run itEPSS 0.33%Oct 2, 2025
- Medium6.9Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTCheck if you run itEPSS 0.39%Oct 2, 2025
- Medium6.9Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafteCheck if you run itEPSS 0.34%Oct 2, 2025
Sort