Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowiCheck if you run itEPSS 0.21%Aug 21, 2025
- Critical9.3EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface.Check if you run itEPSS 2.32%Aug 21, 2025
- Medium6.9Phproject is a high performance full-featured project management system.Check if you run itEPSS 0.40%Aug 21, 2025
- Medium6.9Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.1Check if you run itEPSS 0.25%Aug 21, 2025
- Medium6.9UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.15%Aug 21, 2025
- High7.3UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.48%Aug 21, 2025
- High8.1The Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.23%Aug 21, 2025
- Critical9.8Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injectionCheck this weekEPSS 47.95%Aug 20, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privilegCheck if you run itEPSS 0.43%Aug 20, 2025
- High8.6SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header.Check if you run itEPSS 1.20%Aug 20, 2025
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.34%Aug 20, 2025
- Medium6.3Frappe is a full-stack web application framework.Check if you run itEPSS 0.38%Aug 20, 2025
- Medium5.4IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.18%Aug 20, 2025
- Medium6.5IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.50%Aug 20, 2025
- High7.1Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Check if you run itEPSS 0.17%Aug 20, 2025
- High7.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a maliCheck if you run itEPSS 0.45%Aug 20, 2025
- High7.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulCheck if you run itEPSS 0.45%Aug 20, 2025
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality.Check if you run itEPSS 0.13%Aug 20, 2025
- Medium5.4The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0.Check if you run itEPSS 0.17%Aug 20, 2025
- Medium6.3CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g.Check if you run itEPSS 0.40%Aug 20, 2025
- High8.6Server-Side Request Forgery (SSRF) vulnerability in Pik Online Yazılım Çözümleri A.Ş.Check if you run itEPSS 0.28%Aug 20, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in ads.txt Guru ads.txt Guru Connect adstxt-guru-connect allows Cross Site Request Forgery.This issue affects ads.txt Guru Connect:Check if you run itEPSS 0.16%Aug 20, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in DexignZone JobZilla - Job Board WordPress Theme jobzilla allows Privilege Escalation.This issue affects JobZilla - Job Board WordCheck if you run itEPSS 0.18%Aug 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Cross Site Request Forgery.This issue affects Sign-up Sheets: from n/a throughCheck if you run itEPSS 0.13%Aug 20, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Cross Site Request Forgery.This issue affects NEX-Forms: from n/a througCheck if you run itEPSS 0.17%Aug 20, 2025
Sort