Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3A vulnerability was found in Ackites KillWxapkg up to 2.4.1.Check if you run itEPSS 2.37%May 21, 2025
- Medium4.8Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 beCheck if you run itEPSS 0.26%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck if you run itEPSS 0.32%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck if you run itEPSS 0.26%May 21, 2025
- Low3.1Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12.Check if you run itEPSS 0.23%May 21, 2025
- High7.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1Check if you run itEPSS 0.42%May 21, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Piwik PRO allows Cross-Site Scripting (XSS).This issue affects Piwik PRCheck if you run itEPSS 0.23%May 21, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) atCheck if you run itEPSS 0.27%May 21, 2025
- Medium6.5A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker withCheck if you run itEPSS 0.34%May 21, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remCheck if you run itEPSS 0.63%May 21, 2025
- High7.1A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affecCheck if you run itEPSS 0.42%May 21, 2025
- High8.6A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)Check if you run itEPSS 0.70%May 21, 2025
- Medium4.3A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected sysCheck if you run itEPSS 0.35%May 21, 2025
- Medium5.1A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affeCheck if you run itEPSS 0.14%May 21, 2025
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- Medium4.3jq is a command-line JSON processor.Check if you run itEPSS 0.46%May 21, 2025
- Medium5.3A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical.Check if you run itEPSS 0.53%May 21, 2025
- Low2.4Data provided in a request performed to the server while activating a new device are put in a database.Check if you run itEPSS 0.25%May 21, 2025
- Low2.4Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attaCheck if you run itEPSS 0.24%May 21, 2025
- Low2.4Input provided in comment section of Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.Check if you run itEPSS 0.24%May 21, 2025
- Medium5.1A low-privileged user can access information about profiles created in Proget MDM (Mobile Device Management), which contain details about allowed/prohibited functions.Check if you run itEPSS 0.19%May 21, 2025
- Medium4.6In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by the MDM (Mobile Device Management).Check if you run itEPSS 0.19%May 21, 2025
- High7.0In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently use functionalities restricted by the MDM (Mobile Device Management).Check if you run itEPSS 0.20%May 21, 2025
- High7.5When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it.Check this weekEPSS 15.30%May 21, 2025
- Medium6.5The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with tCheck if you run itEPSS 0.22%May 21, 2025
Sort