Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.27%Nov 20, 2025
- High8.0Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.60%Nov 20, 2025
- High8.3Microsoft Defender Portal Spoofing VulnerabilityCheck if you run itEPSS 0.33%Nov 20, 2025
- High8.6Azure Monitor Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.76%Nov 20, 2025
- Critical10.0Azure Bastion Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.91%Nov 20, 2025
- High8.8Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.52%Nov 20, 2025
- Critical9.8Microsoft SharePoint Online Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.13%Nov 20, 2025
- High8.8IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user toCheck if you run itEPSS 0.50%Nov 20, 2025
- High7.5A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges.Check if you run itEPSS 7.30%Nov 20, 2025
- Medium6.1IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting.Check if you run itEPSS 0.21%Nov 20, 2025
- Medium5.1IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.Check if you run itEPSS 0.12%Nov 20, 2025
- Medium6.2IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.Check if you run itEPSS 0.12%Nov 20, 2025
- Medium5.3IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system.Check if you run itEPSS 0.27%Nov 20, 2025
- High7.0The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an attacker unauthorized access to camera configuration informatCheck if you run itEPSS 0.18%Nov 20, 2025
- High7.0The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may allow an attacker unauthorized access to camera configuration iCheck if you run itEPSS 0.18%Nov 20, 2025
- Medium4.8Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'DemographicCheck if you run itEPSS 0.22%Nov 20, 2025
- High8.7Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijackCheck if you run itEPSS 0.57%Nov 20, 2025
- Medium6.3Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.Check if you run itEPSS 0.55%Nov 20, 2025
- High8.8Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounCheck if you run itEPSS 0.68%Nov 20, 2025
- Medium6.1Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.Check if you run itEPSS 0.45%Nov 20, 2025
- Low3.5Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.Check if you run itEPSS 0.49%Nov 20, 2025
- Medium4.3Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PCheck if you run itEPSS 0.38%Nov 20, 2025
- High7.1Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accountsCheck if you run itEPSS 0.34%Nov 20, 2025
- Medium4.3Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email aCheck if you run itEPSS 0.32%Nov 20, 2025
- Low3.5Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user.Check if you run itEPSS 0.40%Nov 20, 2025
Sort