Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a craCheck if you run itEPSS 0.22%Sep 23, 2025
- High7.5Free5gc 4.0.1 is vulnerable to Buffer Overflow.Check if you run itEPSS 0.42%Sep 23, 2025
- Medium6.5In Shenzhen C-Data Technology Co.Check if you run itEPSS 0.14%Sep 23, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.Check if you run itEPSS 0.20%Sep 23, 2025
- Medium5.3Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.Check if you run itEPSS 0.16%Sep 23, 2025
- High7.5A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document.Check if you run itEPSS 0.43%Sep 23, 2025
- High7.1Gutenify Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.23%Sep 23, 2025
- Medium6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin_Manager.php file.Check if you run itEPSS 0.38%Sep 23, 2025
- Medium4.8A vulnerability was found in axboe fio up to 3.41.Check if you run itEPSS 0.15%Sep 22, 2025
- Medium5.3A vulnerability has been found in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.36%Sep 22, 2025
- Medium5.3A flaw has been found in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.36%Sep 22, 2025
- Medium6.9In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, andCheck if you run itEPSS 0.35%Sep 22, 2025
- Medium5.3A vulnerability was detected in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.37%Sep 22, 2025
- Medium5.3A security vulnerability has been detected in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.37%Sep 22, 2025
- Medium5.3Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 thCheck if you run itEPSS 0.28%Sep 22, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.12%Sep 22, 2025
- Medium6.9A weakness has been identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium5.3Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly chCheck if you run itEPSS 0.26%Sep 22, 2025
- Medium6.9A security flaw has been discovered in Jinher OA 2.0.Check if you run itEPSS 0.55%Sep 22, 2025
- High8.7A vulnerability was identified in Tenda AC20 up to 16.03.08.12.Check if you run itEPSS 0.85%Sep 22, 2025
- Medium5.4When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended.Check if you run itEPSS 0.35%Sep 22, 2025
- Medium6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.43%Sep 22, 2025
- Medium5.3A vulnerability was determined in D-Link DIR-823X 240126/240802/250416.Check if you run itEPSS 5.76%Sep 22, 2025
- High8.6Codex CLI is a coding agent from OpenAI that runs locally.Check if you run itEPSS 0.89%Sep 22, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
Sort