Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- Critical9.8Erxes <1.6.1 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.63%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section via the field "Profisso" (professor).Check if you run itEPSS 0.26%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.26%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) inside the filter Save option in the "Busca" (search) function.Check if you run itEPSS 0.26%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (observances) in the "Pessoas" (persons) section when creatingCheck if you run itEPSS 0.26%Jun 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a crafteCheck if you run itEPSS 0.42%Jun 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a cCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a craftCheck if you run itEPSS 0.51%Jun 10, 2025
- UnknownMicrosoft Windows Use After FreePatch nowKEVEPSS 16.26%Jun 10, 2025
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.23%Jun 10, 2025
- Unknownwindriver vxworks Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 3.16%Jun 10, 2025
- Unknownwindriver vxworks Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 75.25%Jun 10, 2025
- Medium6.6In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaCheck if you run itEPSS 0.17%Jun 9, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.Check this weekEPSS 11.28%Jun 9, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical.Check if you run itEPSS 6.08%Jun 9, 2025
- Critical9.3CyberData 011209 Intercom could allow an authenticated attacker to upload arbitrary files to multiple locations within the system.Check if you run itEPSS 0.58%Jun 9, 2025
- High8.7A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical.Check if you run itEPSS 6.39%Jun 9, 2025
- High8.7CyberData 011209 Intercom does not properly store or protect web server admin credentials.Check if you run itEPSS 0.42%Jun 9, 2025
- UnknownALAS-2025-1982 (important): amazon-ssm-agentCheck if you run itEPSS 0.94%Jun 9, 2025
- UnknownCVE-2024-53173 is listed by ALAS-2025-1983 (important): kernel.Check if you run itEPSS 0.27%Jun 9, 2025
- Medium6.9CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injections.Check if you run itEPSS 0.37%Jun 9, 2025
- High8.7CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption.Check if you run itEPSS 0.41%Jun 9, 2025
- Critical9.3CyberData 011209 Intercom could allow an unauthenticated user access to the Web Interface through an alternate path.Check if you run itEPSS 0.52%Jun 9, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13.Check if you run itEPSS 0.30%Jun 9, 2025
Sort