Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending aCheck if you run itEPSS 0.36%Sep 8, 2025
- Medium6.9A vulnerability was found in Jinher OA up to 1.2.Check if you run itEPSS 0.57%Sep 8, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.Check if you run itEPSS 0.52%Sep 8, 2025
- Medium6.9A vulnerability has been found in Jinher OA up to 1.2.Check if you run itEPSS 0.57%Sep 8, 2025
- Critical9.2ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal.Check if you run itEPSS 0.60%Sep 8, 2025
- Medium5.5jinher jinher_oa Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.85%Sep 8, 2025
- Medium6.1'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS).Check if you run itEPSS 0.27%Sep 8, 2025
- High8.6Ditty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.24%Sep 8, 2025
- Medium5.1A vulnerability was identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Sep 8, 2025
- High7.4The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy.Check if you run itEPSS 0.29%Sep 8, 2025
- High8.4WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplateeCheck if you run itEPSS 0.20%Sep 8, 2025
- High7.4The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules.Check if you run itEPSS 0.24%Sep 8, 2025
- UnknownCVE-2020-8772 is named in a Cloudflare managed-rules release.Check this weekEPSS 88.05%Sep 8, 2025
- Medium5.3A vulnerability was found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.33%Sep 7, 2025
- Medium5.3A vulnerability has been found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.38%Sep 7, 2025
- Medium5.3A flaw has been found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.38%Sep 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/cryp…Check if you run itEPSS 0.15%Sep 7, 2025
- High7.1Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.34%Sep 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" This reverts commit 69505fe98f198ee813898cbcaf677094963Check if you run itEPSS 0.15%Sep 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various ordering issues for lower instance locks and teamCheck if you run itEPSS 0.15%Sep 7, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() ath11k_mac_disable_peer_fixed_rate() isCheck if you run itEPSS 0.20%Sep 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testing F2FS with xfstests using UFS backed virtCheck if you run itEPSS 0.15%Sep 7, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle lenCheck if you run itEPSS 0.20%Sep 7, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_clusters() In setup_swap_map(), we only ensure badpages are inCheck if you run itEPSS 0.18%Sep 7, 2025
- Medium5.3A weakness has been identified in itsourcecode POS Point of Sale System 1.0.Check if you run itEPSS 0.40%Sep 7, 2025
Sort