Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.Check if you run itEPSS 0.63%Sep 3, 2025
- Medium6.9A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0.Check if you run itEPSS 0.46%Sep 3, 2025
- Medium4.8A weakness has been identified in code-projects Responsive Blog Site 1.0.Check if you run itEPSS 0.31%Sep 3, 2025
- Medium6.9A security flaw has been discovered in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Sep 3, 2025
- Low2.9Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.Check if you run itEPSS 0.71%Sep 3, 2025
- Medium6.9A vulnerability was identified in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium6.5The AI Engine plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the rest_list and delete_files functions in all versioCheck if you run itEPSS 0.27%Sep 3, 2025
- Critical9.3XWiki xwiki Relative Path TraversalPatch nowKEVEPSS 1.77%Sep 3, 2025
- Critical9.3XWiki xwiki Relative Path TraversalPatch nowKEVEPSS 1.68%Sep 3, 2025
- Medium6.9A vulnerability was determined in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium6.3Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.Check if you run itEPSS 0.34%Sep 3, 2025
- High8.4Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrarCheck if you run itEPSS 0.19%Sep 3, 2025
- Medium6.9A vulnerability was found in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.42%Sep 3, 2025
- High8.4IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBCheck if you run itEPSS 0.14%Sep 3, 2025
- Medium5.3A flaw has been found in Campcodes Sales and Inventory System 1.0.Check if you run itEPSS 0.41%Sep 3, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to upload arbitrary files tCheck if you run itEPSS 0.32%Sep 3, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacCheck if you run itEPSS 0.32%Sep 3, 2025
- UnknownThis CVE ID was assigned in error to a vulnerability that was both introduced and fixed before the code landed in the Stable channel of Chrome, and has been withdrawn.Open the advisorySep 3, 2025
- Medium5.9ImpactThe attacker can validate if a user exists by checking the time login returns.Check if you run itEPSS 0.28%Sep 3, 2025
- Medium4.8SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session.Check if you run itEPSS 0.32%Sep 3, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Store…Check if you run itEPSS 0.21%Sep 3, 2025
- High7.2Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition ltl-freight-quotes-daylight-edition allows Object Injection.This issue afCheck if you run itEPSS 0.38%Sep 3, 2025
- High7.2Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight-quotes-day-ross-edition allows Object Injection.This issueCheck if you run itEPSS 0.38%Sep 3, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/aCheck if you run itEPSS 0.17%Sep 3, 2025
- Medium5.4Missing Authorization vulnerability in Ali Khallad Contact Form By Mega Forms mega-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.22%Sep 3, 2025
Sort