Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0CVE-2025-30214 is listed by Frappe is a full-stack web application framework..Check if you run itEPSS 0.41%Mar 25, 2025
- Medium6.3CVE-2025-30213 is listed by Frappe is a full-stack web application framework..Check if you run itEPSS 0.72%Mar 25, 2025
- Medium6.6CVE-2025-30212 is listed by Frappe is a full-stack web application framework..Check if you run itEPSS 0.44%Mar 25, 2025
- High8.8A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3.Check if you run itEPSS 0.63%Mar 25, 2025
- High8.8A vulnerability was found in Open Asset Import Library Assimp 5.4.3.Check if you run itEPSS 0.55%Mar 25, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityPatch nowKEVEPSS 87.94%Mar 25, 2025
- High8.3Google Chromium Mojo Sandbox Escape VulnerabilityPatch nowKEVEPSS 9.24%Mar 25, 2025
- UnknownUser Registration & Membership WordPress Plugin Membership Addon Privilege EscalationPatch nowKEVEPSS 49.08%Mar 25, 2025
- Unknownpluginus active_products_tables_for_woocommerce Improper Input ValidationPatch nowKEVEPSS 0.38%Mar 25, 2025
- Critical10.0PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).Patch nowKEVEPSS 1.09%Mar 25, 2025
- Medium5.3Yonyou ufida_erp-nc Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.84%Mar 24, 2025
- Low2.1A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1.Check if you run itEPSS 0.74%Mar 24, 2025
- Medium6.1Kentico Xperience CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 60.59%Mar 24, 2025
- Low2.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1.Check if you run itEPSS 0.73%Mar 24, 2025
- High7.2Kentico Xperience Path Traversal VulnerabilityPatch nowKEVEPSS 4.02%Mar 24, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 97.17%Mar 24, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 74.06%Mar 24, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.40%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized mirror annotationsCheck this weekEPSS 86.15%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotationCheck this weekEPSS 36.96%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-url annotationCheck this weekEPSS 37.28%Mar 23, 2025
- Unknowningress-nginx controller auth secret file path traversal vulnerabilityCheck if you run itEPSS 3.33%Mar 23, 2025
- UnknownHorde imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 31.29%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.96%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.15%Mar 21, 2025
Sort