Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: beforCheck if you run itEPSS 0.17%May 21, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internCheck if you run itEPSS 0.24%May 21, 2025
- Medium5.9Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affCheck if you run itEPSS 0.12%May 21, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 21, 2025
- Low2.3A vulnerability was found in Ackites KillWxapkg up to 2.4.1.Check if you run itEPSS 0.45%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.31%May 21, 2025
- Medium5.4A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service.Check if you run itEPSS 0.30%May 21, 2025
- Medium4.3A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.Check if you run itEPSS 0.19%May 21, 2025
- Medium6.5A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affectCheck if you run itEPSS 5.90%May 21, 2025
- Low2.3A vulnerability was found in Ackites KillWxapkg up to 2.4.1.Check if you run itEPSS 2.37%May 21, 2025
- Medium4.8Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 beCheck if you run itEPSS 0.26%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck if you run itEPSS 0.32%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck if you run itEPSS 0.26%May 21, 2025
- Low3.1Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12.Check if you run itEPSS 0.23%May 21, 2025
- High7.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1Check if you run itEPSS 0.42%May 21, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Piwik PRO allows Cross-Site Scripting (XSS).This issue affects Piwik PRCheck if you run itEPSS 0.23%May 21, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) atCheck if you run itEPSS 0.27%May 21, 2025
- Medium6.5A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker withCheck if you run itEPSS 0.34%May 21, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remCheck if you run itEPSS 0.63%May 21, 2025
- High7.1A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affecCheck if you run itEPSS 0.42%May 21, 2025
- High8.6A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)Check if you run itEPSS 0.70%May 21, 2025
- Medium4.3A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected sysCheck if you run itEPSS 0.35%May 21, 2025
- Medium5.1A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affeCheck if you run itEPSS 0.14%May 21, 2025
Sort