Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 thCheck if you run itEPSS 0.28%Sep 22, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.12%Sep 22, 2025
- Medium6.9A weakness has been identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium5.3Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly chCheck if you run itEPSS 0.26%Sep 22, 2025
- Medium6.9A security flaw has been discovered in Jinher OA 2.0.Check if you run itEPSS 0.55%Sep 22, 2025
- High8.7A vulnerability was identified in Tenda AC20 up to 16.03.08.12.Check if you run itEPSS 0.85%Sep 22, 2025
- Medium5.4When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended.Check if you run itEPSS 0.35%Sep 22, 2025
- Medium6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.43%Sep 22, 2025
- Medium5.3A vulnerability was determined in D-Link DIR-823X 240126/240802/250416.Check if you run itEPSS 5.76%Sep 22, 2025
- High8.6Codex CLI is a coding agent from OpenAI that runs locally.Check if you run itEPSS 0.89%Sep 22, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Critical10.0FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.49%Sep 22, 2025
- High7.5Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 5.46%Sep 22, 2025
- Critical9.6Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 4.03%Sep 22, 2025
- Medium6.9A vulnerability has been found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.48%Sep 22, 2025
- Low2.7mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.Check if you run itEPSS 0.44%Sep 22, 2025
- Medium6.9A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.38%Sep 22, 2025
- Medium5.3Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata.Check if you run itEPSS 0.22%Sep 22, 2025
- Medium6.9A flaw has been found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.68%Sep 22, 2025
- High7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.Check if you run itEPSS 0.18%Sep 22, 2025
- High8.2Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect.Check if you run itEPSS 0.43%Sep 22, 2025
- Medium6.9A vulnerability was detected in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.68%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System wp-attractive-donations-system-easy-stripe-paypal-donations allows Stored XSS.This issue afCheck if you run itEPSS 0.13%Sep 22, 2025
- Medium4.3Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a thCheck if you run itEPSS 0.24%Sep 22, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio publitio allows Server Side Request Forgery.This issue affects Publitio: from n/a through <= 2.2.1.Check if you run itEPSS 0.22%Sep 22, 2025
Sort