Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.46%Jun 4, 2025
- Medium5.3A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical.Check if you run itEPSS 0.48%Jun 4, 2025
- High7.1FreshRSS is a self-hosted RSS feed aggregator.Check if you run itEPSS 0.46%Jun 4, 2025
- Low3.4A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device.Check if you run itEPSS 0.17%Jun 4, 2025
- High8.9CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service.Check if you run itEPSS 0.73%Jun 4, 2025
- Medium5.3A vulnerability was found in WuKongOpenSource WukongCRM 9.0.Check if you run itEPSS 0.31%Jun 3, 2025
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.44%Jun 3, 2025
- Medium5.5Umbraco is an ASP.NET content management system (CMS).Check if you run itEPSS 0.18%Jun 3, 2025
- Medium5.3webpack-dev-server allows users to use webpack with a development server that provides live reloading.Check if you run itEPSS 0.57%Jun 3, 2025
- Medium5.3A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1.Check if you run itEPSS 0.47%Jun 3, 2025
- Medium6.9A vulnerability classified as problematic was found in Open5GS up to 2.7.3.Check if you run itEPSS 0.75%Jun 3, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: froCheck if you run itEPSS 0.14%Jun 2, 2025
- Medium5.2A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connectCheck if you run itEPSS 0.53%Jun 2, 2025
- Medium6.5A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services.Check if you run itEPSS 0.22%Jun 2, 2025
- Medium6.9A server-side request forgery vulnerability exists in HPE StoreOnce Software.Check if you run itEPSS 0.62%Jun 2, 2025
- Medium5.3The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and iCheck if you run itEPSS 0.33%May 31, 2025
- Medium6.3A vulnerability exists in the media upload component of the Asset Suite versions listed below.Check if you run itEPSS 0.24%May 30, 2025
- Medium6.5The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31.Check if you run itEPSS 0.22%May 30, 2025
- High8.1Zitadel is open-source identity infrastructure software.Check if you run itEPSS 0.39%May 30, 2025
- Critical9.1Fabio is an HTTP(S) and TCP router for deploying applications managed by consul.Check if you run itEPSS 0.45%May 30, 2025
- Medium6.6Laravel Rest Api is an API generator.Check if you run itEPSS 0.61%May 30, 2025
- Low2.9Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.94%May 30, 2025
- Medium5.3A vulnerability was found in chshcms mccms 2.7.Check if you run itEPSS 0.52%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_add_folio() fails (because it is fuCheck if you run itEPSS 0.18%May 29, 2025
- Medium5.3An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.Check if you run itEPSS 0.53%May 29, 2025
Sort