Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A flaw was found in runtimes-inventory-rhel8-operator.Check if you run itEPSS 0.20%Dec 15, 2025
- High8.7NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler.Check if you run itEPSS 1.04%Dec 15, 2025
- High8.4NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components.Check if you run itEPSS 0.18%Dec 15, 2025
- High8.7NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling.Check if you run itEPSS 0.40%Dec 15, 2025
- Medium4.3The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 6.5.1 via the "ConveCheck if you run itEPSS 0.23%Dec 15, 2025
- Medium6.4The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin for WordPress is vulnerable to StoreCheck if you run itEPSS 0.29%Dec 15, 2025
- Medium4.3A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secretCheck if you run itEPSS 0.48%Dec 15, 2025
- Low0.9An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions grantedCheck if you run itEPSS 0.14%Dec 15, 2025
- Medium6.9A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0.Check if you run itEPSS 0.45%Dec 15, 2025
- Medium6.9A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0.Check if you run itEPSS 0.42%Dec 15, 2025
- Medium4.3The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframesCheck if you run itEPSS 0.21%Dec 15, 2025
- Medium5.4LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-dispCheck if you run itEPSS 0.18%Dec 15, 2025
- Critical9.3A weakness has been identified in Shiguangwu sgwbox N3 2.0.25.Check if you run itEPSS 6.47%Dec 15, 2025
- High7.1The URL Shortify WordPress plugin before 1.11.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which coCheck if you run itEPSS 0.17%Dec 15, 2025
- High7.1The URL Shortify WordPress plugin before 1.11.3 does not sanitize and escape a parameter before outputting it back in the page, leading to a reflected cross site scripting, which cCheck if you run itEPSS 0.17%Dec 15, 2025
- High8.7Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a speCheck if you run itEPSS 0.39%Dec 15, 2025
- Critical9.3A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25.Check this weekEPSS 18.62%Dec 15, 2025
- Medium4.8A weakness has been identified in atlaszz AI Photo Team Galleryit App 1.3.8.2 on Android.Check if you run itEPSS 0.20%Dec 15, 2025
- Medium6.9A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3.Check if you run itEPSS 0.33%Dec 15, 2025
- Medium5.3A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b.Check if you run itEPSS 0.26%Dec 15, 2025
- Medium4.7An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.29%Dec 15, 2025
- Medium5.5An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.htmlCheck if you run itEPSS 0.12%Dec 15, 2025
- Critical9.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.Check if you run itEPSS 0.50%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.60%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
Sort