Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker wiCheck if you run itEPSS 0.91%Aug 20, 2025
- High7.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a maliCheck if you run itEPSS 0.45%Aug 20, 2025
- High7.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulCheck if you run itEPSS 0.45%Aug 20, 2025
- High8.7CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted dataCheck if you run itEPSS 0.68%Aug 20, 2025
- Critical9.3A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 bCheck if you run itEPSS 1.90%Aug 20, 2025
- Medium4.6QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality.Check if you run itEPSS 0.23%Aug 20, 2025
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality.Check if you run itEPSS 0.13%Aug 20, 2025
- High8.4CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access mCheck if you run itEPSS 0.19%Aug 20, 2025
- Medium4.8QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality.Check if you run itEPSS 0.19%Aug 20, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.26%Aug 20, 2025
- Medium4.5There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function.Check if you run itEPSS 0.20%Aug 20, 2025
- Medium5.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user,Check if you run itEPSS 0.25%Aug 20, 2025
- Medium5.1Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.31%Aug 20, 2025
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.QCheck if you run itEPSS 0.22%Aug 20, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.QCheck if you run itEPSS 0.19%Aug 20, 2025
- Medium5.4The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0.Check if you run itEPSS 0.17%Aug 20, 2025
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryAug 20, 2025
- Medium4.3In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script filesCheck if you run itEPSS 0.80%Aug 20, 2025
- Medium5.5In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email contentCheck if you run itEPSS 0.28%Aug 20, 2025
- High7.5In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipCheck if you run itEPSS 0.12%Aug 20, 2025
- High8.7In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram contentCheck if you run itEPSS 0.28%Aug 20, 2025
- Medium5.2In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCheck if you run itEPSS 0.43%Aug 20, 2025
- Medium6.5In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server startCheck if you run itEPSS 0.13%Aug 20, 2025
- Medium6.5In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden filesCheck if you run itEPSS 0.25%Aug 20, 2025
- Medium4.7In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCheck if you run itEPSS 0.20%Aug 20, 2025
Sort