Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registered, or does not existCheck if you run itEPSS 0.31%Aug 8, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.QCheck if you run itEPSS 0.59%Aug 8, 2025
- High7.5In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities.Check if you run itEPSS 8.81%Aug 8, 2025
- High7.1IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnCheck if you run itEPSS 0.20%Aug 8, 2025
- Medium5.3Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability.Check if you run itEPSS 0.83%Aug 8, 2025
- Medium5.3Powered BLUE Server versions 0.20130927 and prior contain a path traversal vulnerability.Check if you run itEPSS 0.33%Aug 8, 2025
- High8.4skops is a Python library which helps users share and ship their scikit-learn based models.Check if you run itEPSS 0.22%Aug 8, 2025
- Medium5.5Astro is a web framework for content-driven websites.Check if you run itEPSS 0.65%Aug 8, 2025
- Medium6.8uv is a Python package and project manager written in Rust.Check if you run itEPSS 0.21%Aug 8, 2025
- Medium4.8Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function.Check if you run itEPSS 0.24%Aug 8, 2025
- Critical10.0Azure OpenAI Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.12%Aug 7, 2025
- Medium6.4Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.Check if you run itEPSS 0.23%Aug 7, 2025
- Low3.7IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass security restrictions caused by a faCheck if you run itEPSS 0.42%Aug 7, 2025
- High8.7Cloudflare quiche was discovered to be vulnerable to an infinite loop when sending packets containing RETIRE_CONNECTION_ID frames.Check if you run itEPSS 0.40%Aug 7, 2025
- Medium6.9A vulnerability was identified in the XPC services of Fantastical.Check if you run itEPSS 0.39%Aug 7, 2025
- High8.7On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP.Check if you run itEPSS 0.47%Aug 7, 2025
- High7.0EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access.Check if you run itEPSS 0.15%Aug 7, 2025
- High8.6SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.21%Aug 7, 2025
- Medium5.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.21%Aug 7, 2025
- Low2.3Let's Encrypt client and ACME library written in Go (Lego).Check if you run itEPSS 0.22%Aug 7, 2025
- Medium5.4Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection.Check if you run itEPSS 0.24%Aug 7, 2025
- Critical9.1ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption.Check if you run itEPSS 0.16%Aug 7, 2025
- Medium4.0An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.Check if you run itEPSS 0.56%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.Check if you run itEPSS 0.30%Aug 7, 2025
Sort