Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 92.22%Sep 17, 2025
- High8.0In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail.Check if you run itEPSS 1.15%Sep 17, 2025
- Critical9.8A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request.Check if you run itEPSS 3.46%Sep 17, 2025
- Medium6.5WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality.Check if you run itEPSS 0.41%Sep 17, 2025
- Medium4.0Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP POST request with an empty HTTPCheck if you run itEPSS 0.21%Sep 17, 2025
- Medium6.3A Cross-Site Request Forgery (CSRF) vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration (ZCS) when the zimbraFeatureResetPasswordStatus attribute isCheck if you run itEPSS 0.19%Sep 17, 2025
- Medium4.3An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameterCheck if you run itEPSS 0.35%Sep 17, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 8.97%Sep 17, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.49%Sep 17, 2025
- High7.5A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS).Check if you run itEPSS 0.36%Sep 16, 2025
- High8.8A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges.Check if you run itEPSS 0.48%Sep 16, 2025
- High8.6A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections.Check if you run itEPSS 0.42%Sep 16, 2025
- Medium5.1Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allows remote attackeCheck if you run itEPSS 0.23%Sep 16, 2025
- Medium6.8A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes.Check if you run itEPSS 0.32%Sep 16, 2025
- Medium6.7A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploit built-in script execution capabilities.Check if you run itEPSS 0.22%Sep 16, 2025
- High7.2A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access.Check if you run itEPSS 0.14%Sep 16, 2025
- Medium6.5A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system.Check if you run itEPSS 0.34%Sep 16, 2025
- High7.2A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlCheck if you run itEPSS 0.64%Sep 16, 2025
- Medium4.9A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files.Check if you run itEPSS 0.32%Sep 16, 2025
- Medium6.9Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorizaCheck if you run itEPSS 0.29%Sep 16, 2025
- Medium5.3A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0.Check if you run itEPSS 0.35%Sep 16, 2025
- Medium6.9A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0.Check if you run itEPSS 0.42%Sep 16, 2025
- Medium6.9A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0.Check if you run itEPSS 0.42%Sep 16, 2025
- Medium6.9A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0.Check if you run itEPSS 0.49%Sep 16, 2025
- Critical9.3Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts.Check if you run itEPSS 3.27%Sep 16, 2025
Sort