Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, an unauthenticated attacCheck if you run itEPSS 0.22%Jul 7, 2025
- Medium6.5In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an unauthenticated attackCheck if you run itEPSS 0.20%Jul 7, 2025
- High8.7WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.46%Jul 7, 2025
- High8.7WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.46%Jul 7, 2025
- High8.9Natours is a Tour Booking API.Check if you run itEPSS 0.34%Jul 7, 2025
- Medium5.3A vulnerability classified as problematic has been found in CodeAstro Online Movie Ticket Booking System 1.0.Check if you run itEPSS 0.26%Jul 7, 2025
- Medium6.9A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b.Check if you run itEPSS 0.59%Jul 7, 2025
- Medium6.9Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulnerability is exploited, unintended requests may be sent to inCheck if you run itEPSS 0.31%Jul 7, 2025
- Medium5.3A vulnerability was found in BoyunCMS up to 1.4.20.Check if you run itEPSS 0.38%Jul 7, 2025
- Medium5.3A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9.Check if you run itEPSS 0.31%Jul 6, 2025
- Medium6.7In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute systemCheck this weekEPSS 23.08%Jul 5, 2025
- High7.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.Check if you run itEPSS 1.92%Jul 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exports_proc As of now nfsd calls create_proc_exports_entry() at stCheck if you run itEPSS 0.17%Jul 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("iommu/vt-d: Add supportCheck if you run itEPSS 0.17%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INFO: CPU 25 Unable to handle kernel paging rCheck if you run itEPSS 0.18%Jul 4, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().Check if you run itEPSS 0.56%Jul 4, 2025
- High7.2Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0.Check if you run itEPSS 0.22%Jul 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in tb_cfg_request_dequeue()Check if you run itEPSS 0.27%Jul 4, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a throCheck if you run itEPSS 0.19%Jul 4, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Brian S.Check if you run itEPSS 0.15%Jul 4, 2025
- Medium4.3The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Jul 4, 2025
- Critical9.3A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations.Check if you run itEPSS 1.94%Jul 3, 2025
- Medium4.9n8n is a workflow automation platform.Check if you run itEPSS 0.47%Jul 3, 2025
- High7.6During startup, the device automatically logs in the EPC2 Windows user without requesting a password.Check if you run itEPSS 0.27%Jul 3, 2025
- Medium4.3The application is vulnerable to cross-site request forgery.Check if you run itEPSS 0.21%Jul 3, 2025
Sort