Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.3A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder.Check if you run itEPSS 0.21%Jun 17, 2025
- Low1.0conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting.Check if you run itEPSS 0.18%Jun 17, 2025
- Critical9.1A privilege escalation from host to domain vulnerability was found in the FreeIPA project.Check if you run itEPSS 1.99%Jun 17, 2025
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck if you run itEPSS 0.15%Jun 17, 2025
- High7.3Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsCheck if you run itEPSS 0.13%Jun 17, 2025
- High7.8A flaw was found in linux-pam.Check if you run itEPSS 0.47%Jun 17, 2025
- Medium6.9Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)Check if you run itEPSS 9.67%Jun 17, 2025
- High8.7Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler GatewayCheck if you run itEPSS 6.60%Jun 17, 2025
- Medium6.4The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's masterslider_pb and ms_slide shortcodes in all versioCheck if you run itEPSS 0.26%Jun 17, 2025
- Medium4.3The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on several funCheck if you run itEPSS 0.29%Jun 17, 2025
- Medium6.4The Simple Logo Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.9.3 due to insufficient inCheck if you run itEPSS 0.28%Jun 17, 2025
- Medium4.8Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface.Check if you run itEPSS 0.32%Jun 17, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) in osCommerce v4.Check if you run itEPSS 0.49%Jun 17, 2025
- Medium5.1A vulnerability classified as critical was found in Webkul QloApps 1.6.1.Check if you run itEPSS 0.57%Jun 17, 2025
- Medium5.1A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5.Check if you run itEPSS 0.77%Jun 17, 2025
- None0.0This CVE ID has been rejected by its CNA as it was not a security issue.Open the advisoryJun 17, 2025
- None0.0This CVE ID has been rejected by its CNA as it was not a security issue.Open the advisoryJun 17, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
- Medium5.1A vulnerability was found in frdel Agent-Zero up to 0.8.4.Check if you run itEPSS 0.55%Jun 17, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.98%Jun 17, 2025
- Medium4.8The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site ScriptCheck if you run itEPSS 0.26%Jun 17, 2025
- High8.7A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404.Check if you run itEPSS 0.98%Jun 17, 2025
- High8.7A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical.Check if you run itEPSS 0.98%Jun 17, 2025
- High8.7A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical.Check if you run itEPSS 0.98%Jun 17, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0.Check if you run itEPSS 0.69%Jun 17, 2025
Sort