Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.67%Aug 21, 2025
- Medium5.3An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.Check if you run itEPSS 0.28%Aug 21, 2025
- Medium5.3An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise.Check if you run itEPSS 0.36%Aug 21, 2025
- Critical9.3A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi ElectricCheck if you run itEPSS 0.72%Aug 21, 2025
- High8.7Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system resources.Check if you run itEPSS 0.34%Aug 21, 2025
- Medium4.8There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malCheck if you run itEPSS 0.22%Aug 21, 2025
- Medium4.8There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malCheck if you run itEPSS 0.22%Aug 21, 2025
- Medium4.8There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malCheck if you run itEPSS 0.22%Aug 21, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to addCheck if you run itEPSS 0.19%Aug 21, 2025
- High7.8Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability.Check if you run itEPSS 0.15%Aug 21, 2025
- Medium5.3Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.12%Aug 21, 2025
- High8.3On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server.Check if you run itEPSS 0.28%Aug 21, 2025
- Medium6.9Phproject is a high performance full-featured project management system.Check if you run itEPSS 0.40%Aug 21, 2025
- Medium6.9Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.1Check if you run itEPSS 0.25%Aug 21, 2025
- Medium6.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.25%Aug 21, 2025
- Medium6.9UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.15%Aug 21, 2025
- High7.3UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.48%Aug 21, 2025
- Medium4.9A flaw was found in org.keycloak/keycloak-model-storage-service.Check if you run itEPSS 0.52%Aug 21, 2025
- High8.0UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.39%Aug 21, 2025
- Medium5.1A vulnerability was detected in SourceCodester Advanced School Management System 1.0.Check if you run itEPSS 0.29%Aug 21, 2025
- Medium5.2ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.36%Aug 21, 2025
- Medium6.9A weakness has been identified in SourceCodester Online Bank Management System 1.0.Check if you run itEPSS 0.44%Aug 21, 2025
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through < 7.2Check if you run itEPSS 0.34%Aug 21, 2025
- High8.5Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the sCheck if you run itEPSS 0.60%Aug 21, 2025
- Medium6.4The Bible SuperSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘selector_height’ parameter in all versions up to, and including, 6.0.1 due to insufCheck if you run itEPSS 0.26%Aug 21, 2025
Sort