Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleCheck this weekEPSS 36.97%Jun 23, 2025
- Medium5.4In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleCheck this weekEPSS 38.60%Jun 23, 2025
- Medium5.4In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleCheck if you run itEPSS 1.00%Jun 23, 2025
- Medium6.6Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection viaCheck this weekEPSS 12.22%Jun 23, 2025
- Critical10.0alibaba fastjson Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 0.75%Jun 23, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 23, 2025
- Low2.7xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF.Check if you run itEPSS 0.21%Jun 23, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
- UnknownSymantec endpoint_detection_and_response Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.49%Jun 23, 2025
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.40%Jun 23, 2025
- Critical10.0Yonyou ufida-nc Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.56%Jun 23, 2025
- High8.7Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.12%Jun 23, 2025
- UnknownLinksys e1000 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.15%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
- Unknownengeniustech esr300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 24.84%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Use of Hard-coded CredentialsPatch nowKEVEPSS 0.66%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 13.19%Jun 23, 2025
- Medium5.1geoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 23, 2025
- High8.7geoffrowland jmol Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.06%Jun 23, 2025
- High8.4An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges.Check if you run itEPSS 0.16%Jun 23, 2025
- High8.1An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie.Check if you run itEPSS 0.33%Jun 23, 2025
- Critical9.8An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService componentCheck if you run itEPSS 0.72%Jun 23, 2025
- UnknownStrapi Strapi Improper AuthenticationPatch nowKEVEPSS 4.12%Jun 23, 2025
- Unknownfit2cloud kubepi Use of Hard-coded CredentialsPatch nowKEVEPSS 69.67%Jun 23, 2025
- Unknowndedecms dedecms Path Traversal: '..\filedir'Patch nowKEVEPSS 2.41%Jun 23, 2025
Sort