Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 0.13%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 1.19%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability.Check if you run itEPSS 0.88%Apr 20, 2026
- Medium4.9Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.50%Apr 20, 2026
- High8.1Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.64%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 1.19%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability.Check if you run itEPSS 0.42%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 0.44%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability.Check if you run itEPSS 1.16%Apr 20, 2026
- Medium6.5A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated…Check if you run itEPSS 0.32%Apr 20, 2026
- Low2.0A weakness has been identified in Pagekit CMS up to 1.0.18.Check if you run itEPSS 0.24%Apr 20, 2026
- Low1.9A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0.Check if you run itEPSS 0.21%Apr 20, 2026
- Low2.0A vulnerability was identified in Z-BlogPHP 1.7.5.Check if you run itEPSS 0.22%Apr 20, 2026
- High7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-serv…Check if you run itEPSS 0.08%Apr 20, 2026
- High7.5Junrar is an open source java RAR archive library.Check if you run itEPSS 0.34%Apr 20, 2026
- High7.1OpenProject is open-source, web-based project management software.Check if you run itEPSS 0.17%Apr 20, 2026
- Medium4.6pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file.Check if you run itEPSS 0.14%Apr 20, 2026
- Critical9.2Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php con…Check if you run itEPSS 0.66%Apr 20, 2026
- Medium5.1Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitra…Check if you run itEPSS 0.28%Apr 20, 2026
- High8.3Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed dir…Check if you run itEPSS 0.26%Apr 20, 2026
- High8.7Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged field…Check if you run itEPSS 0.56%Apr 20, 2026
- High8.8Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Check if you run itEPSS 0.54%Apr 20, 2026
- Medium5.8Vexa is an open-source, self-hostable meeting bot API and meeting transcription API.Check if you run itEPSS 0.20%Apr 20, 2026
- High7.5Vexa is an open-source, self-hostable meeting bot API and meeting transcription API.Check if you run itEPSS 0.40%Apr 20, 2026
- Medium5.3OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Check if you run itEPSS 0.29%Apr 20, 2026
Sort