Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a userCheck if you run itEPSS 0.27%Jul 10, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.Check if you run itEPSS 0.31%Jul 10, 2025
- High8.8Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to accCheck if you run itEPSS 0.51%Jul 10, 2025
- High8.0An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.Check if you run itEPSS 0.36%Jul 10, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted paylCheck if you run itEPSS 0.21%Jul 10, 2025
- Medium6.8An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck if you run itEPSS 0.15%Jul 9, 2025
- Medium6.3An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints toCheck if you run itEPSS 0.15%Jul 9, 2025
- Medium6.4The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, andCheck if you run itEPSS 0.27%Jul 9, 2025
- Medium6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘calendar_header’ parameter in all versionsCheck if you run itEPSS 0.30%Jul 9, 2025
- High7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and inCheck this weekEPSS 56.09%Jul 9, 2025
- Medium4.3IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.Check if you run itEPSS 0.23%Jul 9, 2025
- Medium4.3IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature ofCheck if you run itEPSS 0.26%Jul 9, 2025
- Critical9.1Folo organizes feeds content into one timeline.Check if you run itEPSS 0.35%Jul 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvme_tcp_handle_r2t() to ensure it's not part oCheck if you run itEPSS 0.45%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cache_set_flush() 1.Check if you run itEPSS 0.18%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices are probing, a concurrencCheck if you run itEPSS 0.19%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: riscv: save the SR_SUM status over switches When threads/tasks are switched we need to ensure the old execution'Check if you run itEPSS 0.24%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly [BUG] There is syzbot based reproducer that can crCheck if you run itEPSS 0.17%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gets and enables all regulator supplies inCheck if you run itEPSS 0.18%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write memcg_path_store() assigns a newCheck if you run itEPSS 0.17%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Prevent overflow in size calculation for memdup_user() Number of apqn target list entries contained iCheck if you run itEPSS 0.18%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio unpinning syzbot complains about an unmapping failure: [ 108.070381][ T14] kernel BUG aCheck if you run itEPSS 0.17%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() While testing null_blk with configfs, echoCheck if you run itEPSS 0.17%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add sanity checks for drm_edid_raw() When EDID is retrieved via drm_edid_raw(), it doesn't guarCheck if you run itEPSS 0.14%Jul 9, 2025
Sort