Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input.Check if you run itEPSS 1.21%Sep 30, 2025
- Medium4.9IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive informCheck if you run itEPSS 0.30%Sep 30, 2025
- Medium5.4IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting.Check if you run itEPSS 0.19%Sep 30, 2025
- Medium5.3Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 throughCheck if you run itEPSS 0.29%Sep 30, 2025
- Low3.3Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration fileCheck if you run itEPSS 0.09%Sep 30, 2025
- High8.7NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action.Check if you run itEPSS 0.24%Sep 30, 2025
- Medium4.6NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action.Check if you run itEPSS 0.22%Sep 30, 2025
- Low2.4NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action.Check if you run itEPSS 0.13%Sep 30, 2025
- Medium5.3Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method.Check if you run itEPSS 0.27%Sep 30, 2025
- Medium4.8Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.Check if you run itEPSS 0.31%Sep 30, 2025
- High8.8Local privilege escalation due to insecure XPC service configuration.Check if you run itEPSS 0.13%Sep 30, 2025
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.18%Sep 30, 2025
- Medium6.4A container privilege escalation flaw was found in KServe ModelMesh container images.Check if you run itEPSS 0.16%Sep 30, 2025
- Medium5.9Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of thCheck if you run itEPSS 2.00%Sep 30, 2025
- Medium6.5Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms.Check if you run itEPSS 2.24%Sep 30, 2025
- High7.5Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.Check if you run itEPSS 1.55%Sep 30, 2025
- Medium4.0Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even afteCheck if you run itEPSS 0.12%Sep 30, 2025
- High7.5JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.23%Sep 30, 2025
- High8.6Sandbox escape due to integer overflow in the Graphics: Canvas2D component.Check if you run itEPSS 0.27%Sep 30, 2025
- Medium6.0A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carryCheck if you run itEPSS 0.29%Sep 30, 2025
- High7.5The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all versions up to, and including, 2.28.2 due to insufficieCheck if you run itEPSS 0.36%Sep 30, 2025
- Medium4.3The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_submodule()Check if you run itEPSS 0.24%Sep 30, 2025
- High8.8The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94.Check if you run itEPSS 0.22%Sep 30, 2025
- High8.2The LatePoint plugin for WordPress is vulnerable to Authentication Bypass due to insufficient identity verification within the steps__load_step route of the latepoint_route_call AJCheck if you run itEPSS 0.41%Sep 30, 2025
- Medium6.4The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'latepoint_resouCheck if you run itEPSS 0.25%Sep 30, 2025
Sort