Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3A vulnerability was found in Qualitor 8.20/8.24.Check if you run itEPSS 2.69%May 25, 2025
- Medium5.3A vulnerability was found in Tmall Demo up to 20250505.Check if you run itEPSS 0.34%May 24, 2025
- Medium6.1The 4stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.Check if you run itEPSS 0.32%May 24, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.44%May 23, 2025
- Low3.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.25%May 23, 2025
- High8.2Cross-Site Request Forgery (CSRF) vulnerability in x000x occupancyplan occupancyplan allows SQL Injection.This issue affects occupancyplan: from n/a through <= 1.0.3.0.Check if you run itEPSS 0.19%May 23, 2025
- Medium5.9A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attackCheck if you run itEPSS 0.27%May 23, 2025
- Medium4.6A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows remote authentCheck if you run itEPSS 0.43%May 23, 2025
- Medium4.3A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive informationCheck if you run itEPSS 0.34%May 23, 2025
- High7.0SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: thrCheck if you run itEPSS 0.29%May 22, 2025
- Medium6.9Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.29%May 22, 2025
- High7.7Asterisk is an open-source private branch exchange (PBX).Check if you run itEPSS 0.53%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.24%May 22, 2025
- Medium4.1Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNXCheck this weekEPSS 10.16%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.24%May 22, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.59%May 22, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.60%May 21, 2025
- Medium5.3A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2.Check if you run itEPSS 0.28%May 21, 2025
- Medium4.3A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.Check if you run itEPSS 0.19%May 21, 2025
- High7.1A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affecCheck if you run itEPSS 0.42%May 21, 2025
- High8.6A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)Check if you run itEPSS 0.70%May 21, 2025
- Medium4.3A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected sysCheck if you run itEPSS 0.35%May 21, 2025
- Low2.4Data provided in a request performed to the server while activating a new device are put in a database.Check if you run itEPSS 0.25%May 21, 2025
- Medium5.1A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Device Management), as well as details of the devices like theiCheck if you run itEPSS 0.21%May 21, 2025
- Medium5.3A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000.Check if you run itEPSS 6.87%May 20, 2025
Sort