Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.36%Nov 19, 2025
- Medium6.5Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.27%Nov 19, 2025
- Medium6.5Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.27%Nov 19, 2025
- High7.1Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.31%Nov 19, 2025
- High8.1Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.36%Nov 19, 2025
- Critical9.1Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.41%Nov 19, 2025
- Medium6.5Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.26%Nov 19, 2025
- Medium6.5Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.27%Nov 19, 2025
- Medium5.8authentik is an open-source Identity Provider.Check if you run itEPSS 0.27%Nov 19, 2025
- Medium4.8authentik is an open-source Identity Provider.Check if you run itEPSS 0.23%Nov 19, 2025
- High8.7A vulnerability was detected in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.75%Nov 19, 2025
- Medium6.0The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's inteCheck if you run itEPSS 0.29%Nov 19, 2025
- Medium6.9Astro is a web framework.Check if you run itEPSS 0.54%Nov 19, 2025
- High7.1astro astro Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Patch nowKEVEPSS 0.53%Nov 19, 2025
- Medium5.4Astro is a web framework.Check if you run itEPSS 0.27%Nov 19, 2025
- Low3.5Astro is a web framework.Check if you run itEPSS 0.43%Nov 19, 2025
- High8.7AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflCheck if you run itEPSS 2.82%Nov 19, 2025
- High8.7AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality impleCheck if you run itEPSS 3.44%Nov 19, 2025
- High8.5AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windows services using helCheck if you run itEPSS 0.22%Nov 19, 2025
- Critical9.3AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFilCheck if you run itEPSS 1.19%Nov 19, 2025
- High8.7AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script.Check if you run itEPSS 0.57%Nov 19, 2025
- Critical9.3AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated scriptCheck if you run itEPSS 0.76%Nov 19, 2025
- Medium6.9AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated promptCheck if you run itEPSS 0.49%Nov 19, 2025
- High8.5AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly permissive file systemCheck if you run itEPSS 0.22%Nov 19, 2025
- Medium6.9eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability via the /utl/wed/insertImage.do and /utl/wed/inserCheck if you run itEPSS 0.46%Nov 19, 2025
Sort