Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.43%Sep 15, 2025
- Medium4.8Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/ API endpoint in Liferay Portal 7.4.3.51 through 7.4.3.109, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7Check if you run itEPSS 0.27%Sep 15, 2025
- Medium5.3A weakness has been identified in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.35%Sep 15, 2025
- Medium5.3In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versionCheck if you run itEPSS 0.25%Sep 15, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration.Check if you run itEPSS 0.48%Sep 15, 2025
- Medium6.9An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and performCheck if you run itEPSS 0.45%Sep 15, 2025
- Medium6.6FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.46%Sep 15, 2025
- Medium6.9A security flaw has been discovered in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.43%Sep 15, 2025
- Medium6.3FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.44%Sep 15, 2025
- Low2.1Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times durCheck if you run itEPSS 0.18%Sep 15, 2025
- High8.8color-name is a JSON with CSS color names.Check if you run itEPSS 0.55%Sep 15, 2025
- Medium5.3A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464.Check if you run itEPSS 0.34%Sep 15, 2025
- Medium6.9Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 3Check if you run itEPSS 0.26%Sep 15, 2025
- High8.63DAlloy is a lightWeight 3D-viewer for MediaWiki.Check if you run itEPSS 0.38%Sep 15, 2025
- Medium5.9Openfire is an XMPP server licensed under the Open Source Apache License.Check if you run itEPSS 0.23%Sep 15, 2025
- Medium6.8A weakness has been identified in SpyShelter up to 15.4.0.1015.Check if you run itEPSS 0.15%Sep 15, 2025
- High8.8is-arrayish checks if an object can be used like an Array.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8error-ex allows error subclassing and stack customization.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8color-convert provides plain color conversion functions in JavaScript.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8color-string is a parser and generator for CSS color strings.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8debug is a JavaScript debugging utility.Check if you run itEPSS 0.48%Sep 15, 2025
- High8.8color is a Javascript color conversion and manipulation library.Check if you run itEPSS 0.43%Sep 15, 2025
- High8.8simple-swizzle swizzles function arguments.Check if you run itEPSS 0.41%Sep 15, 2025
- High8.8backlash parses collected strings with escapes.Check if you run itEPSS 0.41%Sep 15, 2025
- Medium4.8Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 9Check if you run itEPSS 0.23%Sep 15, 2025
Sort