Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection.Check if you run itEPSS 0.26%Aug 7, 2025
- Medium6.1Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.Check if you run itEPSS 0.28%Aug 7, 2025
- Medium5.3Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources.Check if you run itEPSS 0.32%Aug 7, 2025
- Medium5.4Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection.Check if you run itEPSS 0.27%Aug 7, 2025
- Medium6.1Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189.Check if you run itEPSS 0.38%Aug 7, 2025
- High8.8A cross-site scripting (XSS) vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitrary web scripts or HTML via injecting a cCheck if you run itEPSS 0.35%Aug 7, 2025
- Medium5.3An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request.Check if you run itEPSS 0.33%Aug 7, 2025
- Critical9.8FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.Check if you run itEPSS 0.70%Aug 7, 2025
- High7.8GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installation directory.Check if you run itEPSS 0.25%Aug 7, 2025
- Medium5.6In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.Check if you run itEPSS 0.51%Aug 7, 2025
- Medium5.5In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.Check if you run itEPSS 0.23%Aug 7, 2025
- Medium5.6In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.Check if you run itEPSS 0.31%Aug 7, 2025
- High8.1In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclCheck if you run itEPSS 0.71%Aug 7, 2025
- Medium6.6In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.Check if you run itEPSS 0.22%Aug 7, 2025
- Critical9.1ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption.Check if you run itEPSS 0.17%Aug 7, 2025
- Medium6.6An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.Check if you run itEPSS 0.19%Aug 7, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 81.26%Aug 7, 2025
- UnknownGrafana Labs Grafana Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.08%Aug 7, 2025
- Medium4.0An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.Check if you run itEPSS 0.57%Aug 7, 2025
- UnknownMicro Focus acutoweb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.77%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php.Check if you run itEPSS 0.32%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.Check if you run itEPSS 0.32%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.Check if you run itEPSS 0.37%Aug 7, 2025
- Medium6.1Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters.Check if you run itEPSS 0.21%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters.Check if you run itEPSS 0.37%Aug 7, 2025
Sort