Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- UnknownLumis lumis_experience_platform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.81%Sep 25, 2025
- High7.3Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.37%Sep 24, 2025
- High7.3TOTOLINK x6000r_firmware Improper Input ValidationPatch nowKEVEPSS 0.85%Sep 24, 2025
- High7.7Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.29%Sep 24, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: tCheck this weekEPSS 13.46%Sep 24, 2025
- Medium4.8Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.24%Sep 24, 2025
- High7.5Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.43%Sep 24, 2025
- Medium5.3A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attaCheck if you run itEPSS 0.34%Sep 24, 2025
- Medium5.3A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacCheck if you run itEPSS 0.20%Sep 24, 2025
- Medium6.1A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS)Check if you run itEPSS 0.34%Sep 24, 2025
- Medium6.5A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resultinCheck if you run itEPSS 0.24%Sep 24, 2025
- High7.7A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected deCheck if you run itEPSS 0.40%Sep 24, 2025
- High7.7A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)Check if you run itEPSS 0.40%Sep 24, 2025
- High8.6A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device toCheck if you run itEPSS 0.44%Sep 24, 2025
- Medium5.8A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACCheck if you run itEPSS 0.32%Sep 24, 2025
- Medium4.3A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gatewayCheck if you run itEPSS 0.17%Sep 24, 2025
- Medium4.3A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 80Check if you run itEPSS 0.12%Sep 24, 2025
- Medium4.8A security flaw has been discovered in Mangati NovoSGA up to 2.2.9.Check if you run itEPSS 0.31%Sep 24, 2025
- Critical9.1Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.36%Sep 24, 2025
- Medium6.9In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by PuppetCheck if you run itEPSS 0.19%Sep 24, 2025
- High7.5Transient DOS while processing power control requests with invalid antenna or stream values.Check if you run itEPSS 0.22%Sep 24, 2025
- High7.5Transient DOS while handling command data during power control processing.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.5Transient DOS while parsing the EPTM test control message to get the test pattern.Check if you run itEPSS 0.21%Sep 24, 2025
Sort