Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6ejson2env allows users to decrypt EJSON secrets and export them as environment variables.Check if you run itEPSS 1.42%May 21, 2025
- Low3.3GitHub Desktop is an open-source, Electron-based GitHub app designed for git development.Check if you run itEPSS 0.18%May 21, 2025
- Medium4.8XWiki is a generic wiki platform.Check if you run itEPSS 1.03%May 21, 2025
- High7.7jq is a command-line JSON processor.Check if you run itEPSS 0.56%May 21, 2025
- Medium5.3A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2.Check if you run itEPSS 0.28%May 21, 2025
- Medium4.6containerd is an open-source container runtime.Check if you run itEPSS 0.29%May 21, 2025
- High7.7OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects.Check if you run itEPSS 4.07%May 21, 2025
- Medium5.7Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: beforCheck if you run itEPSS 0.17%May 21, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internCheck if you run itEPSS 0.24%May 21, 2025
- Medium5.9Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affCheck if you run itEPSS 0.12%May 21, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 21, 2025
- Low2.3A vulnerability was found in Ackites KillWxapkg up to 2.4.1.Check if you run itEPSS 0.45%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.31%May 21, 2025
- Medium5.4A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service.Check if you run itEPSS 0.30%May 21, 2025
- Medium4.3A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.Check if you run itEPSS 0.19%May 21, 2025
- Medium6.5A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affectCheck if you run itEPSS 5.90%May 21, 2025
- Low2.3A vulnerability was found in Ackites KillWxapkg up to 2.4.1.Check if you run itEPSS 2.37%May 21, 2025
- Medium4.8Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 beCheck if you run itEPSS 0.26%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck if you run itEPSS 0.32%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck if you run itEPSS 0.26%May 21, 2025
- Low3.1Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12.Check if you run itEPSS 0.23%May 21, 2025
- High7.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1Check if you run itEPSS 0.42%May 21, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Piwik PRO allows Cross-Site Scripting (XSS).This issue affects Piwik PRCheck if you run itEPSS 0.23%May 21, 2025
Sort