Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.19%Aug 15, 2025
- Medium5.3HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.Check if you run itEPSS 0.15%Aug 15, 2025
- Medium6.2This issue was addressed with improved checks.Check if you run itEPSS 0.15%Aug 15, 2025
- None0.0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryAug 15, 2025
- High7.5HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries.Check if you run itEPSS 0.57%Aug 15, 2025
- Medium5.4IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting.Check if you run itEPSS 0.18%Aug 15, 2025
- High8.4A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege.Check if you run itEPSS 0.17%Aug 15, 2025
- Low2.6@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates.Check if you run itEPSS 0.24%Aug 15, 2025
- Medium6.9Improper Control of Generation of Code ('Code Injection') vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This issue affects KAP: 3.6.0.Check if you run itEPSS 0.21%Aug 15, 2025
- Medium4.3Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 beforeCheck if you run itEPSS 0.24%Aug 15, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0Check if you run itEPSS 0.52%Aug 15, 2025
- Medium4.7Server-Side Request Forgery (SSRF) vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6.Check if you run itEPSS 0.26%Aug 15, 2025
- Medium4.3Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting (XSS).This issue affectsCheck if you run itEPSS 0.23%Aug 15, 2025
- High7.6Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.Check if you run itEPSS 0.27%Aug 15, 2025
- High7.6Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issueCheck if you run itEPSS 0.29%Aug 15, 2025
- Critical9.1A vulnerability has been found in the MSoft MFlash application that allows execution of arbitrary code on the server.Check if you run itEPSS 0.54%Aug 15, 2025
- Medium4.8URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2.Check if you run itEPSS 0.46%Aug 15, 2025
- High7.6Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xolluteon Dropshix allows DOM-Based XSS.This issue affects Dropshix: from n/aCheck if you run itEPSS 0.43%Aug 15, 2025
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection.Check if you run itEPSS 0.42%Aug 15, 2025
- Medium5.3Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate VidCheck if you run itEPSS 0.29%Aug 15, 2025
- Medium5.5Astro is a web framework for content-driven websites.Check if you run itEPSS 0.57%Aug 15, 2025
- Medium5.4Plane is open-source project management software.Check if you run itEPSS 0.21%Aug 15, 2025
- High7.8A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability.Check if you run itEPSS 0.18%Aug 15, 2025
- High7.8A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability.Check if you run itEPSS 0.18%Aug 15, 2025
- High7.8A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.Check if you run itEPSS 0.18%Aug 15, 2025
Sort