Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3ClipShare is a lightweight and cross-platform tool for clipboard sharing.Check if you run itEPSS 0.17%Jun 11, 2025
- Medium6.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1Check if you run itEPSS 0.31%Jun 11, 2025
- Critical9.8Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.Check if you run itEPSS 0.54%Jun 11, 2025
- Critical9.3Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 9.29%Jun 11, 2025
- Medium6.5A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saviCheck if you run itEPSS 0.58%Jun 11, 2025
- Critical9.8Certain canvas operations could have lead to memory corruption.Check if you run itEPSS 0.66%Jun 11, 2025
- Low3.1Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information abCheck if you run itEPSS 0.22%Jun 11, 2025
- Medium4.1Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administraCheck if you run itEPSS 0.28%Jun 11, 2025
- Medium5.2A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with NXGPro+ controller manufactured between April 2020 to April 2025).Check if you run itEPSS 0.21%Jun 11, 2025
- High7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, aCheck if you run itEPSS 0.94%Jun 11, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- UnknownZoho firewall_analyzer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 99.29%Jun 11, 2025
- High7.8The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which isCheck if you run itEPSS 0.14%Jun 10, 2025
- Medium5.5The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permCheck if you run itEPSS 0.21%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- Medium4.7In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs.Check if you run itEPSS 0.67%Jun 10, 2025
- Low2.3The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0.Check if you run itEPSS 0.82%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and sCheck if you run itEPSS 0.59%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password ofCheck if you run itEPSS 0.59%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.33%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
Sort