Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability has been found in jasonclark getsemantic up to 040c96eb8cf9947488bd01b8de99b607b0519f7d.Check if you run itEPSS 0.39%Aug 19, 2025
- High7.5A flaw has been found in Linksys E5600 1.1.0.26.Check if you run itEPSS 0.55%Aug 19, 2025
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Check if you run itEPSS 0.22%Aug 19, 2025
- Medium5.1A security vulnerability has been detected in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A weakness has been identified in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.38%Aug 19, 2025
- Medium5.1A security flaw has been discovered in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.38%Aug 19, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.28%Aug 19, 2025
- Medium5.3A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7.Check if you run itEPSS 0.52%Aug 19, 2025
- Medium4.3A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due tCheck if you run itEPSS 0.20%Aug 19, 2025
- High8.5A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organizationCheck if you run itEPSS 0.31%Aug 19, 2025
- High8.2Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.Check if you run itEPSS 0.15%Aug 19, 2025
- Medium4.6A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0Check if you run itEPSS 0.22%Aug 19, 2025
- Medium5.3A vulnerability was determined in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.34%Aug 19, 2025
- Medium5.1A vulnerability was found in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability has been found in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium4.8A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0.Check if you run itEPSS 0.21%Aug 19, 2025
- Medium4.8A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android.Check if you run itEPSS 0.27%Aug 19, 2025
- Medium4.4The Contact Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title’ parameter in all versions up to, and including, 8.6.5 due to insufficient inpuCheck if you run itEPSS 0.30%Aug 19, 2025
- Medium4.8A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android.Check if you run itEPSS 0.27%Aug 19, 2025
- Medium6.4The Nexter Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 4.5.4 due to insufficient input sanitCheck if you run itEPSS 0.25%Aug 19, 2025
- Medium6.5A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.Check if you run itEPSS 0.37%Aug 19, 2025
- High7.5An unauthenticated remote attacker can get access without password protection to the affected device.Check if you run itEPSS 0.37%Aug 19, 2025
- Medium6.4The Flexible Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flexible Maps shortcode in all versions up to, and including, 1.18.0 due to insuCheck if you run itEPSS 0.34%Aug 19, 2025
- High7.5The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the build_sql_where() function in all versions up to, and including, 6.1.5 due to insufficienCheck if you run itEPSS 0.52%Aug 19, 2025
- High8.8Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode.Check if you run itEPSS 0.65%Aug 19, 2025
Sort