Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 1.40%Aug 20, 2025
- Medium5.1A vulnerability was found in CodeAstro Ecommerce Website 1.0.Check if you run itEPSS 0.30%Aug 20, 2025
- Medium5.3A vulnerability has been found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.40%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.35%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- Medium5.1A flaw has been found in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.30%Aug 20, 2025
- Medium5.1A vulnerability was detected in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.30%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.22%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- High8.1There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by ZohoCheck if you run itEPSS 0.27%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- High7.0The StrongDM macOS client incorrectly processed JSON-formatted messages.Check if you run itEPSS 0.16%Aug 20, 2025
- High8.5The StrongDM Windows service incorrectly handled communication related to system certificate management.Check if you run itEPSS 0.08%Aug 20, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.24%Aug 20, 2025
- High8.5The StrongDM Windows service incorrectly handled input validation.Check if you run itEPSS 0.15%Aug 20, 2025
- High8.5The StrongDM Client insufficiently protected a pre-authentication token.Check if you run itEPSS 0.11%Aug 20, 2025
- High8.4Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary.Check if you run itEPSS 0.40%Aug 20, 2025
- High7.3AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.20%Aug 20, 2025
- Medium4.9A vulnerability in the debug logging function of Cisco Duo Authentication Proxy could allow an authenticated, high-privileged, remote attacker to view sensitive information in a syCheck if you run itEPSS 0.48%Aug 20, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privilegCheck if you run itEPSS 0.43%Aug 20, 2025
- Critical9.8AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability.Check if you run itEPSS 0.65%Aug 20, 2025
- Critical9.8AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability.Check if you run itEPSS 0.65%Aug 20, 2025
- Medium5.9A vulnerability was found in the Cryostat HTTP API.Check if you run itEPSS 0.33%Aug 20, 2025
Sort