Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket toCheck if you run itEPSS 0.37%Oct 14, 2025
- Medium5.4SAP Application Server for ABAP allows an authenticated attacker to store malicious JavaScript payloads which could be executed in victim user's browser when accessing the affectedCheck if you run itEPSS 0.23%Oct 14, 2025
- Medium6.5karakeep v0.26.0 to v0.7.0 was discovered to contain a Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.36%Oct 14, 2025
- Medium6.5Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted datCheck if you run itEPSS 0.46%Oct 14, 2025
- High7.5An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service (DoS) via uploading a crafted configuration file.Check if you run itEPSS 0.63%Oct 14, 2025
- High7.3A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request.Check if you run itEPSS 0.15%Oct 14, 2025
- Medium6.1Stored Cross-Site Scripting (XSS) in Perfex CRM chatbot before 3.3.1 allows attackers to inject arbitrary HTML/JavaScript.Check if you run itEPSS 0.34%Oct 14, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High7.3A path traversal vulnerability in FastX3 thru 3.3.67 allows an unauthenticated attacker to read arbitrary files on the server.Check if you run itEPSS 0.72%Oct 14, 2025
- Medium6.5A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files.Check if you run itEPSS 0.43%Oct 14, 2025
- Medium6.5Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regular authenticated users can access instruCheck if you run itEPSS 0.29%Oct 14, 2025
- Critical9.0An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.Check if you run itEPSS 0.75%Oct 14, 2025
- High7.8Microsoft Windows Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 6.37%Oct 14, 2025
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Oct 14, 2025
- Critical9.2Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.54%Oct 14, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%Oct 14, 2025
- Medium5.5LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system.Check if you run itEPSS 0.25%Oct 13, 2025
- High7.8yt-grabber-tui is a terminal user interface application for downloading videos.Check if you run itEPSS 0.18%Oct 13, 2025
- Medium6.9gpp-burgerportaal is a Dutch government citizen portal application.Check if you run itEPSS 0.32%Oct 13, 2025
- None0.0loading template...Open the advisoryOct 13, 2025
- Medium4.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.22%Oct 13, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionarioCheck if you run itEPSS 0.89%Oct 13, 2025
- Medium4.8Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA through update 92 and 7.3 GA though update 36 shows contentCheck if you run itEPSS 0.27%Oct 13, 2025
- Medium5.3WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.23%Oct 13, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.26%Oct 13, 2025
Sort