Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- Unknownnavidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Jun 24, 2025
- Medium5.3A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic.Check if you run itEPSS 0.66%Jun 23, 2025
- High7.3Notepad++ is a free and open-source source code editor.Check if you run itEPSS 0.66%Jun 23, 2025
- High8.8Visionatrix is an AI Media processing tool using ComfyUI.Check if you run itEPSS 0.28%Jun 23, 2025
- Medium5.1A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71.Check if you run itEPSS 0.29%Jun 23, 2025
- Medium4.3In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissionsCheck if you run itEPSS 0.36%Jun 23, 2025
- Medium4.8In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleCheck this weekEPSS 36.97%Jun 23, 2025
- Medium5.4In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleCheck this weekEPSS 37.85%Jun 23, 2025
- Medium5.4In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleCheck if you run itEPSS 0.98%Jun 23, 2025
- Medium6.6Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection viaCheck this weekEPSS 12.22%Jun 23, 2025
- Unknownalibaba fastjson Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 0.75%Jun 23, 2025
- Low2.7xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF.Check if you run itEPSS 0.21%Jun 23, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
- Critical10.0Yonyou ufida-nc Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.56%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
- Unknownengeniustech esr300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 24.84%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Use of Hard-coded CredentialsPatch nowKEVEPSS 0.66%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.89%Jun 23, 2025
- Medium5.1geoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 23, 2025
- Critical9.8An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService componentCheck if you run itEPSS 0.72%Jun 23, 2025
- Unknowncode-atlantic popup_maker Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 9.43%Jun 23, 2025
- Medium4.8A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833.Check if you run itEPSS 0.18%Jun 22, 2025
- Medium6.9A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic.Check if you run itEPSS 0.53%Jun 22, 2025
- Medium4.8A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and classified as problematic.Check if you run itEPSS 0.18%Jun 22, 2025
Sort