Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.32%Apr 22, 2026
- High7.2EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.45%Apr 22, 2026
- Critical9.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.50%Apr 22, 2026
- Low2.1http.cookies.Morsel.js_output() returns an inline snippet and only escapes " for JavaScript string context.Check if you run itEPSS 0.21%Apr 22, 2026
- Medium4.6An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium5.3nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.Check if you run itEPSS 0.24%Apr 22, 2026
- High7.5nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.37%Apr 22, 2026
- High8.2nimiq-account contains account primitives to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.27%Apr 22, 2026
- High7.5Nimiq's network-libp2p is a Nimiq network implementation based on libp2p.Check if you run itEPSS 0.35%Apr 22, 2026
- Medium5.3nimiq-libp2p is a Nimiq network implementation based on libp2p.Check if you run itEPSS 0.30%Apr 22, 2026
- Critical9.6nimiq-block contains block primitives to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.22%Apr 22, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins.Check if you run itEPSS 0.20%Apr 22, 2026
- Critical9.3Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives.Check if you run itEPSS 0.39%Apr 22, 2026
- Medium6.9Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side…Check if you run itEPSS 0.80%Apr 22, 2026
- Critical9.3Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executa…Check if you run itEPSS 3.57%Apr 22, 2026
- High7.1Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.ph…Check if you run itEPSS 2.83%Apr 22, 2026
- High8.8Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php…Check if you run itEPSS 3.11%Apr 22, 2026
- Medium6.2A logging issue was addressed with improved data redaction.Check if you run itEPSS 2.88%Apr 22, 2026
- Critical9.8Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, L…Check if you run itEPSS 0.50%Apr 22, 2026
- Low3.3A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s (only-delimited) flag when using the -z (null-terminated) and -d '' (empty del…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter.Check if you run itEPSS 0.16%Apr 22, 2026
- Low3.3A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:] character classes.Check if you run itEPSS 0.15%Apr 22, 2026
- Low3.3A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase.Check if you run itEPSS 0.16%Apr 22, 2026
- Low3.3A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when utilizing the -S (split-string) option.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium5.8A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutils during recursive operations.Check if you run itEPSS 0.11%Apr 22, 2026
Sort