Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Tuleap is an Open Source Suite to improve management of software developments and collaboration.Check if you run itEPSS 0.17%Jun 25, 2025
- High8.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.74%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium4.3URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.Check if you run itEPSS 0.44%Jun 25, 2025
- Medium4.8A vulnerability was found in coldfunction qCUDA up to db0085400c2f2011eed46fbc04fdc0873141688e.Check if you run itEPSS 0.16%Jun 25, 2025
- Medium5.5A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayCheck if you run itEPSS 0.10%Jun 25, 2025
- High8.5Multiple Brother driver installers for Windows contain a privilege escalation vulnerability.Check if you run itEPSS 0.18%Jun 25, 2025
- Medium5.1A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.33%Jun 25, 2025
- High7.5The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_files() function in all versionsCheck if you run itEPSS 0.68%Jun 25, 2025
- High8.0Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store oCheck if you run itEPSS 0.19%Jun 25, 2025
- High7.4Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SCheck if you run itEPSS 0.13%Jun 25, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Medium5.3Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6.Check if you run itEPSS 0.32%Jun 25, 2025
- High7.6IBM InfoSphere Information Server 11.7 vulnerable to SQL injection.Check if you run itEPSS 0.32%Jun 25, 2025
- High8.8IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i.Check if you run itEPSS 0.54%Jun 25, 2025
- Medium6.4The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the DOM Element Attribute in all versions up to, and including, 1.68.4 due to inCheck if you run itEPSS 0.19%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Critical9.2Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 10.43%Jun 25, 2025
- High7.5berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpredictable program behCheck if you run itEPSS 0.41%Jun 25, 2025
- High7.5vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, cauCheck if you run itEPSS 0.37%Jun 25, 2025
- Medium4.6Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site Scripting (XSS) which allowCheck if you run itEPSS 0.29%Jun 25, 2025
- High7.1Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.Check if you run itEPSS 0.46%Jun 25, 2025
Sort