Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).ThiCheck if you run itEPSS 0.24%May 14, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issueCheck if you run itEPSS 0.24%May 14, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal oEmbed Providers allows Cross-Site Scripting (XSS).This issue affects oCheck if you run itEPSS 0.24%May 14, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.Check if you run itEPSS 0.20%May 14, 2025
- Medium6.5It was possible to craft an email that showed a tracking link as an attachment.Check if you run itEPSS 0.39%May 14, 2025
- High8.1Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context.Check if you run itEPSS 0.47%May 14, 2025
- High7.5Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used.Check if you run itEPSS 0.40%May 14, 2025
- High7.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface.Check if you run itEPSS 0.36%May 14, 2025
- High8.9motionEye is an online interface for the software motion, a video surveillance program with motion detection.Check if you run itEPSS 0.51%May 14, 2025
- Critical9.8Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.63%May 14, 2025
- Medium6.1Sulu is an open-source PHP content management system based on the Symfony framework.Check if you run itEPSS 0.47%May 14, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check if you run itEPSS 1.01%May 14, 2025
- Medium6.2Bullfrog's DNS over TCP bypasses domain filteringCheck if you run itEPSS 0.49%May 14, 2025
- Medium5.0iTop is an web based IT Service Management tool.Check if you run itEPSS 0.28%May 14, 2025
- Medium4.3iTop is an web based IT Service Management tool.Check if you run itEPSS 0.29%May 14, 2025
- Medium5.3iTop is an web based IT Service Management tool.Check if you run itEPSS 0.33%May 14, 2025
- High8.6iTop is an web based IT Service Management tool.Check if you run itEPSS 0.66%May 14, 2025
- Medium5.0iTop is an web based IT Service Management tool.Check if you run itEPSS 0.27%May 14, 2025
- Medium6.3iTop is an web based IT Service Management tool.Check if you run itEPSS 0.28%May 14, 2025
- Medium6.5iTop is an web based IT Service Management tool.Check if you run itEPSS 0.35%May 14, 2025
- Critical9.4Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication.Check if you run itEPSS 0.42%May 14, 2025
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication.Check if you run itEPSS 0.30%May 14, 2025
- High7.5In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of theCheck this weekEPSS 26.27%May 14, 2025
- Medium6.0Heap-based Buffer Overflow vulnerability in Apache ORC.Check if you run itEPSS 0.57%May 14, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user.Check if you run itEPSS 0.19%May 14, 2025
Sort