Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that shou…Check if you run itEPSS 0.44%Jun 2, 2026
- High8.1CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.83…Check if you run itEPSS 0.47%Jun 2, 2026
- Medium5.4Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.20%Jun 2, 2026
- Medium5.6Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content.Check if you run itEPSS 0.23%Jun 2, 2026
- Medium5.1Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball.Check if you run itEPSS 0.20%Jun 2, 2026
- Medium5.9A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).Check if you run itEPSS 0.19%Jun 2, 2026
- High8.1Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection.Check if you run itEPSS 0.26%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion.Check if you run itEPSS 0.33%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Supply Co.Check if you run itEPSS 0.33%Jun 2, 2026
- Medium6.3A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary…Check if you run itEPSS 0.26%Jun 2, 2026
- Medium4.6Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory.Check if you run itEPSS 0.23%Jun 2, 2026
- Medium4.3NamelessMC is website software for Minecraft servers.Check if you run itEPSS 0.18%Jun 2, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emilia Projects Progress Planner allows Stored XSS.Check if you run itEPSS 0.14%Jun 2, 2026
- Medium5.4Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.17%Jun 2, 2026
- High8.2Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.Check if you run itEPSS 0.44%Jun 2, 2026
- High7.5Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive.Check if you run itEPSS 0.40%Jun 2, 2026
- High8.2An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement.Check if you run itEPSS 0.35%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion.Check if you run itEPSS 0.33%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in androThemes Cookiteer allows PHP Local File Inclusion.Check if you run itEPSS 0.34%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion.Check if you run itEPSS 0.34%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion.Check if you run itEPSS 0.34%Jun 2, 2026
- High8.8Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling…Check if you run itEPSS 0.13%Jun 2, 2026
- Medium5.3Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log…Check if you run itEPSS 0.20%Jun 2, 2026
- Medium6.5D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability.Check if you run itEPSS 0.22%Jun 2, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS.Check if you run itEPSS 0.15%Jun 2, 2026
Sort