Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform).Check if you run itEPSS 0.33%Oct 21, 2025
- Medium5.4Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform).Check if you run itEPSS 0.24%Oct 21, 2025
- Medium6.5Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Security Management System).Check if you run itEPSS 0.33%Oct 21, 2025
- Medium4.9Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Security Management System).Check if you run itEPSS 0.40%Oct 21, 2025
- Medium6.1code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormUploadField.php.Check if you run itEPSS 0.33%Oct 21, 2025
- Medium6.5ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validati…Check if you run itEPSS 0.43%Oct 21, 2025
- High8.1astral-tokio-tar is a tar archive reading/writing library for async Rust.Check if you run itEPSS 0.70%Oct 21, 2025
- Medium6.1Multiple stored cross-site scripting (XSS) vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute…Check if you run itEPSS 0.19%Oct 21, 2025
- High7.1SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in user a malicious query injection.Check if you run itEPSS 0.28%Oct 21, 2025
- Critical9.4Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.Check if you run itEPSS 0.43%Oct 21, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.65%Oct 21, 2025
- High8.2Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software DeCheck if you run itEPSS 0.28%Oct 21, 2025
- High8.5Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.Check if you run itEPSS 4.54%Oct 21, 2025
- High7.1All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text.Check if you run itEPSS 0.32%Oct 21, 2025
- Critical9.8An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaCheck if you run itEPSS 0.90%Oct 21, 2025
- High8.3Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.Check this weekEPSS 27.38%Oct 21, 2025
- High8.8The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304.Check if you run itEPSS 0.93%Oct 21, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in giSoft Information Technologies City Guide allows Reflected XSS.Check if you run itEPSS 0.20%Oct 21, 2025
- High8.1A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) serCheck if you run itEPSS 5.46%Oct 21, 2025
- High7.2A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USCheck if you run itEPSS 1.45%Oct 21, 2025
- Medium5.0Zimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat proxy.Check if you run itEPSS 0.26%Oct 21, 2025
- High7.5The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to their personal informCheck if you run itEPSS 0.33%Oct 21, 2025
- Critical9.8Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker to escalate privileges and lock out the legCheck if you run itEPSS 0.60%Oct 21, 2025
- High7.5GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.Check if you run itEPSS 2.28%Oct 21, 2025
- Medium4.3Moodle OpenAI Chat Block plugin 3.0.1 (2025021700) suffers from an Insecure Direct Object Reference (IDOR) vulnerability due to insufficient validation of the blockId parameter inCheck if you run itEPSS 0.22%Oct 21, 2025
Sort