Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security.Check if you run itEPSS 0.23%Nov 20, 2025
- High7.2Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd.Check if you run itEPSS 0.38%Nov 20, 2025
- Medium4.8A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0.Check if you run itEPSS 0.28%Nov 20, 2025
- Medium5.3A weakness has been identified in SourceCodester Alumni Management System 1.0.Check if you run itEPSS 0.41%Nov 20, 2025
- High7.2Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd.Check if you run itEPSS 0.40%Nov 20, 2025
- Medium6.9In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie.Check if you run itEPSS 0.28%Nov 20, 2025
- Medium6.9Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly.Check if you run itEPSS 0.34%Nov 20, 2025
- Medium6.9Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly.Check if you run itEPSS 0.34%Nov 20, 2025
- High7.5SonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.91%Nov 20, 2025
- Medium5.3A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequeCheck if you run itEPSS 0.36%Nov 20, 2025
- Medium6.5Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers withCheck if you run itEPSS 0.21%Nov 20, 2025
- Critical9.2An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted wereCheck if you run itEPSS 0.38%Nov 20, 2025
- High7.1Improper input validation vulnerability in TP-Link System Inc.Check if you run itEPSS 0.21%Nov 20, 2025
- Medium6.8A Cross-Site Request Forgery (CSRF) vulnerability was identified in HCL Glovius Cloud.Check if you run itEPSS 0.11%Nov 20, 2025
- Medium5.1Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for LiCheck if you run itEPSS 0.19%Nov 20, 2025
- Medium6.4Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufCheck if you run itEPSS 0.26%Nov 20, 2025
- Medium6.8The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administratorCheck if you run itEPSS 0.35%Nov 20, 2025
- Medium5.3The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handCheck if you run itEPSS 0.26%Nov 20, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Shop Project 1.0.Check if you run itEPSS 0.43%Nov 20, 2025
- Medium5.1A vulnerability was determined in SourceCodester Online Shop Project 1.0.Check if you run itEPSS 0.26%Nov 20, 2025
- Medium6.9A vulnerability was found in code-projects Online Shop Project 1.0.Check if you run itEPSS 0.43%Nov 20, 2025
- High8.7A vulnerability has been found in Tenda AC21 16.03.08.16.Check if you run itEPSS 4.21%Nov 20, 2025
- High8.7A flaw has been found in Tenda AC21 16.03.08.16.Check if you run itEPSS 4.21%Nov 20, 2025
- Medium5.3A vulnerability was detected in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.25%Nov 20, 2025
- Medium6.9A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225.Check this weekEPSS 19.54%Nov 20, 2025
Sort