Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browseCheck if you run itEPSS 0.47%Jul 31, 2025
- High7.5A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to execute javascript in the victim's browser and get some sensCheck if you run itEPSS 0.56%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10.Check if you run itEPSS 0.44%Jul 31, 2025
- High8.8Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file withCheck if you run itEPSS 0.43%Jul 31, 2025
- High7.0pyjwt v2.10.1 was discovered to contain weak encryption.Check if you run itEPSS 0.18%Jul 31, 2025
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.09%Jul 31, 2025
- UnknownYonyou ufida_erp-nc Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.84%Jul 31, 2025
- Unknownsantesoft sante_pacs_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 35.38%Jul 31, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- Unknownidccms idccms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jul 31, 2025
- UnknownCitrix application_delivery_controller_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.83%Jul 31, 2025
- UnknownPalo Alto Networks PAN-OS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.15%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- UnknownCisco unified_ip_interactive_voice_response Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 25.75%Jul 31, 2025
- Medium6.5** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.Check if you run itEPSS 0.63%Jul 30, 2025
- Medium4.9The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient esCheck if you run itEPSS 0.39%Jul 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be chCheck if you run itEPSS 0.19%Jul 30, 2025
- Medium6.0The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.21%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.18%Jul 30, 2025
- Medium6.0The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.17%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.18%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.22%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.23%Jul 30, 2025
- High8.2GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in my_profile_update_form1.php.Check if you run itEPSS 0.45%Jul 30, 2025
- UnknownAdobe experience_manager Deserialization of Untrusted DataPatch nowKEVEPSS 51.68%Jul 30, 2025
Sort