Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Check if you run itEPSS 0.30%May 13, 2025
- Medium6.9A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2).Check if you run itEPSS 0.48%May 13, 2025
- Medium5.1A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Check if you run itEPSS 0.34%May 13, 2025
- High7.1A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Check if you run itEPSS 0.55%May 13, 2025
- High7.1A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Check if you run itEPSS 0.57%May 13, 2025
- High8.7A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), DeCheck if you run itEPSS 0.57%May 13, 2025
- Critical9.3SQL injection vulnerability in DomainsPRO 1.2.Check if you run itEPSS 0.36%May 13, 2025
- High8.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon web allows Reflected XSS.Check if you run itEPSS 0.28%May 13, 2025
- High7.2Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10Check if you run itEPSS 0.45%May 13, 2025
- Critical9.4The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the databaseCheck if you run itEPSS 0.50%May 13, 2025
- High8.6An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.Check if you run itEPSS 0.42%May 13, 2025
- Medium4.6CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end usCheck if you run itEPSS 0.20%May 13, 2025
- Medium5.3Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.Check if you run itEPSS 1.30%May 13, 2025
- High8.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.Check if you run itEPSS 0.44%May 13, 2025
- Medium4.3The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including,Check if you run itEPSS 0.43%May 13, 2025
- High8.8The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and includinCheck if you run itEPSS 1.18%May 13, 2025
- Medium6.5The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versions up to, and including, 4.9.9.8 due to insufficient escapinCheck if you run itEPSS 0.43%May 13, 2025
- High8.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7.Check if you run itEPSS 0.47%May 13, 2025
- Low3.0Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.Check if you run itEPSS 0.20%May 13, 2025
- High8.2VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%May 13, 2025
- High7.5relevanssi relevanssi Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.70%May 13, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025
- High7.7Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted funCheck if you run itEPSS 0.36%May 13, 2025
- High8.3SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function moduleCheck if you run itEPSS 0.47%May 13, 2025
- Medium6.3SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges.Check if you run itEPSS 0.26%May 13, 2025
Sort