Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.51%May 23, 2025
- Low3.5A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a braCheck if you run itEPSS 0.40%May 23, 2025
- Medium5.3A vulnerability was found in zongzhige ShopXO 6.5.0.Check if you run itEPSS 0.43%May 23, 2025
- Medium5.3A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 0.52%May 23, 2025
- High7.2The Solid Mail – SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email Name, Subject, and Body in all versions up to, aCheck if you run itEPSS 0.38%May 23, 2025
- Medium6.9A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 2.12%May 23, 2025
- Medium6.9A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical.Check if you run itEPSS 0.47%May 23, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.Check if you run itEPSS 1.53%May 23, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.Check this weekEPSS 38.28%May 23, 2025
- Critical9.1Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value.Check if you run itEPSS 0.51%May 23, 2025
- Medium4.8Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users.Check if you run itEPSS 0.45%May 23, 2025
- High8.6While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action.Check if you run itEPSS 0.41%May 23, 2025
- Medium5.1DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS).Check if you run itEPSS 0.50%May 23, 2025
- High8.4Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised.Check if you run itEPSS 0.43%May 23, 2025
- Medium6.9The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation.Check if you run itEPSS 0.17%May 23, 2025
- Medium6.4The Tournamatch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trn-ladder-registration-button' shortcode in all versions up to, and including,Check if you run itEPSS 0.28%May 23, 2025
- High8.0A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution.Check if you run itEPSS 0.26%May 23, 2025
- Critical9.1PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.Check if you run itEPSS 0.31%May 23, 2025
- Critical9.8An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution.Check if you run itEPSS 0.74%May 23, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 23, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 23, 2025
- Medium4.7Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive dataCheck if you run itEPSS 0.21%May 23, 2025
- Medium6.8A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, and 5.4.0 before 5.4.10 allows remote, authenticated, and unprivileged users tCheck if you run itEPSS 0.33%May 23, 2025
- Medium5.9A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attackCheck if you run itEPSS 0.27%May 23, 2025
- Medium4.6A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows remote authentCheck if you run itEPSS 0.43%May 23, 2025
Sort