Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3dify dify Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.70%Sep 30, 2025
- High8.1An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operatiCheck if you run itEPSS 0.34%Sep 30, 2025
- High7.3liquidfiles liquidfiles Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.77%Sep 30, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/identCheck if you run itEPSS 0.69%Sep 29, 2025
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side requestCheck if you run itEPSS 0.78%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck if you run itEPSS 0.53%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck if you run itEPSS 0.53%Sep 29, 2025
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blindCheck if you run itEPSS 0.74%Sep 29, 2025
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side requestCheck if you run itEPSS 0.81%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticaCheck if you run itEPSS 0.81%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck if you run itEPSS 0.55%Sep 29, 2025
- Medium4.9IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request.Check if you run itEPSS 0.32%Sep 29, 2025
- Medium4.3A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions.Check if you run itEPSS 0.30%Sep 29, 2025
- Medium6.8The credentials required to access the device's web server are sent in base64 within the HTTP headers.Check if you run itEPSS 0.19%Sep 29, 2025
- High8.7A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition.Check if you run itEPSS 0.76%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'Check if you run itEPSS 0.19%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'Check if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'Check if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'eCheck if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'nCheck if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'cCheck if you run itEPSS 0.24%Sep 29, 2025
- High8.8Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier.Check if you run itEPSS 0.54%Sep 29, 2025
- UnknownDitty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.24%Sep 29, 2025
- High7.5An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17.Check if you run itEPSS 0.42%Sep 29, 2025
- Medium5.3A security flaw has been discovered in itsourcecode Hostel Management System 1.0.Check if you run itEPSS 0.40%Sep 28, 2025
Sort