Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownnavidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Jun 24, 2025
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.07%Jun 24, 2025
- Medium5.3A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611.Check if you run itEPSS 0.29%Jun 23, 2025
- Medium5.3A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic.Check if you run itEPSS 0.66%Jun 23, 2025
- High7.3Notepad++ is a free and open-source source code editor.Check if you run itEPSS 0.66%Jun 23, 2025
- Medium5.3A vulnerability was found in PySpur-Dev pyspur up to 0.1.18.Check if you run itEPSS 0.40%Jun 23, 2025
- Critical9.1Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.Check if you run itEPSS 0.45%Jun 23, 2025
- High8.8Visionatrix is an AI Media processing tool using ComfyUI.Check if you run itEPSS 0.28%Jun 23, 2025
- Medium4.8A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical.Check if you run itEPSS 0.39%Jun 23, 2025
- Medium5.1A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71.Check if you run itEPSS 0.29%Jun 23, 2025
- Medium4.3In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissionsCheck if you run itEPSS 0.36%Jun 23, 2025
- Medium4.8In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleCheck this weekEPSS 36.97%Jun 23, 2025
- Medium5.4In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleCheck this weekEPSS 38.60%Jun 23, 2025
- Medium5.4In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleCheck if you run itEPSS 1.00%Jun 23, 2025
- Medium6.6Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection viaCheck this weekEPSS 12.22%Jun 23, 2025
- Critical10.0alibaba fastjson Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 0.75%Jun 23, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 23, 2025
- Low2.7xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF.Check if you run itEPSS 0.21%Jun 23, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
- UnknownSymantec endpoint_detection_and_response Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.49%Jun 23, 2025
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.40%Jun 23, 2025
- Critical10.0Yonyou ufida-nc Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.56%Jun 23, 2025
- High8.7Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.12%Jun 23, 2025
- UnknownLinksys e1000 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.15%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
Sort