Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields.Check if you run itEPSS 0.37%Dec 11, 2025
- Critical9.3Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium5.3Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields.Check if you run itEPSS 0.26%Dec 11, 2025
- High8.7Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration.Check if you run itEPSS 0.38%Dec 11, 2025
- High8.7reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands.Check if you run itEPSS 3.42%Dec 11, 2025
- Critical9.3dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings.Check if you run itEPSS 1.37%Dec 11, 2025
- Medium5.4Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation direCheck if you run itEPSS 0.10%Dec 11, 2025
- Medium6.9A weakness has been identified in code-projects Class and Exam Timetable Management 1.0.Check if you run itEPSS 0.41%Dec 11, 2025
- Medium6.5The WP Job Portal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.4.0 via the 'downloadCustomUploadedFile' function.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium5.3IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium5.5HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.Check if you run itEPSS 0.11%Dec 11, 2025
- High7.8In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data.Check if you run itEPSS 0.08%Dec 11, 2025
- High7.0In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition.Check if you run itEPSS 0.06%Dec 11, 2025
- Critical9.3A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114.Check if you run itEPSS 5.63%Dec 11, 2025
- Critical9.1pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump filesCheck if you run itEPSS 0.94%Dec 11, 2025
- Medium6.9D-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.99%Dec 11, 2025
- Medium6.9A weakness has been identified in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.39%Dec 11, 2025
- Medium5.3A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.Check if you run itEPSS 0.31%Dec 11, 2025
- Medium5.3A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.Check if you run itEPSS 0.64%Dec 11, 2025
- Low3.8In JetBrains TeamCity before 2025.11 path traversal was possible via file uploadCheck if you run itEPSS 0.80%Dec 11, 2025
- Medium4.8In JetBrains TeamCity before 2025.11 stored XSS was possible via session attributeCheck if you run itEPSS 0.49%Dec 11, 2025
- Low2.7In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadataCheck if you run itEPSS 0.22%Dec 11, 2025
- Low3.1In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosureCheck if you run itEPSS 0.17%Dec 11, 2025
- Medium5.1A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.Check if you run itEPSS 0.26%Dec 11, 2025
- Medium5.3A vulnerability was identified in PowerJob up to 5.1.2.Check if you run itEPSS 0.35%Dec 11, 2025
Sort