Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability.Check if you run itEPSS 0.44%Aug 4, 2025
- Medium6.1Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper NeutrCheck if you run itEPSS 0.27%Aug 4, 2025
- Medium5.0Grafana is an open-source platform for monitoring and observability.Check if you run itEPSS 0.34%Aug 4, 2025
- High8.3A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys.Check if you run itEPSS 0.24%Aug 4, 2025
- High8.8In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent.Check if you run itEPSS 8.05%Aug 4, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.67%Aug 4, 2025
- Critical9.8Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.Check if you run itEPSS 0.56%Aug 4, 2025
- Critical9.1Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.Check if you run itEPSS 0.46%Aug 4, 2025
- High8.1A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a craCheck if you run itEPSS 0.41%Aug 4, 2025
- Critical9.6Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality.Check if you run itEPSS 0.62%Aug 4, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 4, 2025
- Medium6.5An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the utility.Check if you run itEPSS 0.43%Aug 4, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android.Check if you run itEPSS 0.14%Aug 3, 2025
- Medium5.1A vulnerability was found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic.Check if you run itEPSS 0.28%Aug 3, 2025
- Medium5.3A vulnerability has been found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic.Check if you run itEPSS 0.22%Aug 3, 2025
- Low2.5NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs.Check if you run itEPSS 0.15%Aug 2, 2025
- Medium5.5NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources.Check if you run itEPSS 0.17%Aug 2, 2025
- Low3.3NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an exposure of sensitive system information with local unprivileged system access.Check if you run itEPSS 0.14%Aug 2, 2025
- Low3.3NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information.Check if you run itEPSS 0.17%Aug 2, 2025
- Medium4.4NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory.Check if you run itEPSS 0.15%Aug 2, 2025
- High7.1NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters.Check if you run itEPSS 0.19%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Wazifa System 1.0.Check if you run itEPSS 0.50%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Online Farm System 1.0.Check if you run itEPSS 0.48%Aug 2, 2025
- Medium5.4Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on the 'Notes' page when viewing a job but does not completelyCheck if you run itEPSS 0.37%Aug 2, 2025
- High8.1OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover.Check if you run itEPSS 0.38%Aug 2, 2025
Sort