Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5Plane is open-source project management software.Check if you run itEPSS 0.27%May 21, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.60%May 21, 2025
- Medium6.9A vulnerability was found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 21, 2025
- Medium6.9A vulnerability was found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 21, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 46.10%May 21, 2025
- Medium5.3The Open edX Platform is a learning management platform.Check if you run itEPSS 0.46%May 21, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.74%May 21, 2025
- Medium6.9A vulnerability classified as critical was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.74%May 21, 2025
- Medium6.9A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.74%May 21, 2025
- Critical10.0The embedded web server lacks authentication and access controls, allowing unrestricted remote access.Check if you run itEPSS 1.24%May 21, 2025
- Critical9.3Affected Vertiv products contain a stack based buffer overflow vulnerability.Check if you run itEPSS 0.78%May 21, 2025
- Critical9.3Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication.Check if you run itEPSS 0.58%May 21, 2025
- Medium6.9A vulnerability was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.75%May 21, 2025
- Medium6.9A vulnerability was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.75%May 21, 2025
- High7.0Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application.Check if you run itEPSS 0.38%May 21, 2025
- High7.0The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack.Check if you run itEPSS 0.33%May 21, 2025
- Medium6.6ejson2env allows users to decrypt EJSON secrets and export them as environment variables.Check if you run itEPSS 1.42%May 21, 2025
- Low3.3GitHub Desktop is an open-source, Electron-based GitHub app designed for git development.Check if you run itEPSS 0.18%May 21, 2025
- Medium4.8XWiki is a generic wiki platform.Check if you run itEPSS 1.03%May 21, 2025
- High7.7jq is a command-line JSON processor.Check if you run itEPSS 0.56%May 21, 2025
- Medium5.3A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2.Check if you run itEPSS 0.28%May 21, 2025
- Medium4.6containerd is an open-source container runtime.Check if you run itEPSS 0.29%May 21, 2025
- High7.7OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects.Check if you run itEPSS 4.07%May 21, 2025
- Medium5.7Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: beforCheck if you run itEPSS 0.17%May 21, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internCheck if you run itEPSS 0.24%May 21, 2025
Sort