Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects SurveyCheck if you run itEPSS 0.23%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards allows ReflectedCheck if you run itEPSS 0.23%Oct 22, 2025
- Medium6.5Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom CSS:Check if you run itEPSS 0.30%Oct 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects SurveyCheck if you run itEPSS 0.29%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Calvaweb Password only login password-only-login allows Reflected XSS.This issCheck if you run itEPSS 0.30%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jurajpuchky Fix Multiple Redirects fix-multiple-redirects allows Reflected XSSCheck if you run itEPSS 0.30%Oct 22, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComCheck if you run itEPSS 0.42%Oct 22, 2025
- High8.8Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner allows Privilege Escalation.This issue affects Progress Planner: from n/a throughCheck if you run itEPSS 0.48%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object Injection.This issue affects Insurance: from n/a through <= 3.5.Check if you run itEPSS 0.63%Oct 22, 2025
- High7.5Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TablesomCheck if you run itEPSS 0.40%Oct 22, 2025
- Critical10.0A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes.Check if you run itEPSS 0.54%Oct 22, 2025
- High7.7The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mod…Check if you run itEPSS 0.15%Oct 22, 2025
- Medium4.8A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header.Check if you run itEPSS 0.45%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode Syzbot reports a NULL dereference in ni_write_inode.Check if you run itEPSS 0.20%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1Check if you run itEPSS 0.23%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost adjust_inuse_and_calc_cost() use spin_lock_irq()Check if you run itEPSS 0.21%Oct 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec: Restrict string length in decode The QMI TLV value for strings in a lot of qmi element inCheck if you run itEPSS 0.15%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure timer ID search-loop limit is valid posix_timer_add() tries to allocate a posix timer ID byCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: avoid stalls in fq_pie_timer() When setting a high number of flows (limit being 65536), fq_piCheck if you run itEPSS 0.20%Oct 22, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code for negative lengths Although commit c2c24edb1d9c ("arm64: csum:Check if you run itEPSS 0.15%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe Smatch reports: drivers/clocksource/timer-caCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() is allocated in pcf50633_adc_async_read(),Check if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend sdma_v4_0_ip is shared on a few asics,Check if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1_remove_disk() If rddev->raid_disk is greater than mddev->raid_disks, thereCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan() In ath12k_mac_op_hw_scan(), the return vCheck if you run itEPSS 0.18%Oct 22, 2025
Sort