Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users.Check if you run itEPSS 0.49%Jun 10, 2025
- High7.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.51%Jun 10, 2025
- Medium5.3OSGeo GeoServer Missing AuthorizationPatch nowKEVEPSS 1.15%Jun 10, 2025
- High7.8A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk InstaCheck if you run itEPSS 0.21%Jun 10, 2025
- Medium5.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium5.3GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.44%Jun 10, 2025
- High7.1SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL.Check if you run itEPSS 0.21%Jun 10, 2025
- Medium4.8SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability.Check if you run itEPSS 0.19%Jun 10, 2025
- High8.8A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.Check if you run itEPSS 0.38%Jun 10, 2025
- High7.3A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.Check if you run itEPSS 0.36%Jun 10, 2025
- High8.8A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.Check if you run itEPSS 0.38%Jun 10, 2025
- Critical9.3GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.30%Jun 10, 2025
- Critical9.1Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects.Check if you run itEPSS 0.49%Jun 10, 2025
- High7.5Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data.Check if you run itEPSS 0.44%Jun 10, 2025
- Medium6.4The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-color attribute in all versionCheck if you run itEPSS 0.33%Jun 10, 2025
- Medium6.4The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.3.3 dueCheck if you run itEPSS 0.27%Jun 10, 2025
- Medium6.4The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-countdown attribute of Countdown widget in all versions up to, and iCheck if you run itEPSS 0.26%Jun 10, 2025
- High7.5Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.Check if you run itEPSS 0.44%Jun 10, 2025
- High7.5Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data.Check if you run itEPSS 0.43%Jun 10, 2025
- Medium4.3Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.Check if you run itEPSS 0.20%Jun 10, 2025
- High7.3A privilege escalation vulnerability may enable a service account to elevate its privileges.Check if you run itEPSS 0.14%Jun 10, 2025
- High7.5An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands.Check if you run itEPSS 1.02%Jun 10, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- Medium6.9Absolute path disclosure vulnerability in DM Corporative CMS.Check if you run itEPSS 0.35%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
Sort