Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could aCheck if you run itEPSS 0.20%Aug 14, 2025
- Medium5.3We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the sCheck if you run itEPSS 0.28%Aug 14, 2025
- High7.0Youki is a container runtime written in Rust.Check if you run itEPSS 0.18%Aug 14, 2025
- Medium6.2AIDE is an advanced intrusion detection environment.Check if you run itEPSS 0.25%Aug 14, 2025
- Medium6.2AIDE is an advanced intrusion detection environment.Check if you run itEPSS 0.25%Aug 14, 2025
- Medium5.3A vulnerability has been found in linlinjava litemall up to 1.8.0.Check if you run itEPSS 0.39%Aug 14, 2025
- Medium5.3flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.22%Aug 14, 2025
- Low2.8SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability.Check if you run itEPSS 0.11%Aug 14, 2025
- Medium4.8Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore.Check if you run itEPSS 0.23%Aug 14, 2025
- Medium5.5Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability.Check if you run itEPSS 0.29%Aug 14, 2025
- Low3.8Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerability.Check if you run itEPSS 0.14%Aug 14, 2025
- High8.5A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations.Check if you run itEPSS 0.14%Aug 14, 2025
- Low3.1PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access.Check if you run itEPSS 0.24%Aug 14, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0.Check if you run itEPSS 0.52%Aug 14, 2025
- Medium6.5Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics allows Exploiting Incorrectly Configured Access Control SecCheck if you run itEPSS 0.31%Aug 14, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allowsCheck if you run itEPSS 0.21%Aug 14, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in i3geek BaiduXZH Submit(百度熊掌号) i3geek-baiduxzh allows Reflected XSS.This issueCheck if you run itEPSS 0.23%Aug 14, 2025
- Medium6.9A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0.Check if you run itEPSS 0.42%Aug 14, 2025
- Critical9.8The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an aCheck if you run itEPSS 0.44%Aug 14, 2025
- Critical9.8FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.37%Aug 14, 2025
- High7.1Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set.Check if you run itEPSS 0.11%Aug 14, 2025
- Medium6.9A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0.Check if you run itEPSS 0.44%Aug 14, 2025
- High8.6A vulnerability was identified in D-Link DIR-825 2.10.Check if you run itEPSS 0.98%Aug 14, 2025
- Medium6.1The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couldCheck if you run itEPSS 0.22%Aug 14, 2025
- Medium6.5The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or maliciousCheck if you run itEPSS 0.33%Aug 14, 2025
Sort