Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncellinx nvt_web_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.43%Jun 8, 2025
- Unknownthedigitalcraft atomcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.15%Jun 8, 2025
- Unknownzeroshell zeroshell Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.56%Jun 8, 2025
- Unknownjhpyle docassemble Use of Incorrectly-Resolved Name or ReferencePatch nowKEVEPSS 69.49%Jun 7, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 51.90%Jun 7, 2025
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 33.98%Jun 7, 2025
- UnknownXWiki xwiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.19%Jun 7, 2025
- UnknownH3C magic_r300-2100m_firmware Out-of-bounds WritePatch nowKEVEPSS 4.35%Jun 7, 2025
- Unknowntecrail responsive_filemanager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.63%Jun 7, 2025
- Unknowna3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.78%Jun 7, 2025
- UnknownD-Link dir-878_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.41%Jun 7, 2025
- Unknownteclib-edition gestionnaire_libre_de_parc_informatique Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.37%Jun 7, 2025
- UnknownSAP internet_graphics_server Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 41.05%Jun 7, 2025
- Unknownrubedo_project rubedo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 61.44%Jun 7, 2025
- UnknownOracle GlassFish Server, JDeveloper, and WebLogic Server Components Remote Confidentiality VulnerabilityPatch nowKEVEPSS 32.44%Jun 7, 2025
- UnknownOracle Fusion Middleware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 98.22%Jun 7, 2025
- Unknownrainbow_portal rainbow.zen Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.75%Jun 7, 2025
- Unknownsquirrelmail squirrelmail Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 25.75%Jun 7, 2025
- Medium4.0Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.39%Jun 6, 2025
- High8.870mai A510 Use of Default Password Authentication Bypass Vulnerability.Check if you run itEPSS 0.35%Jun 6, 2025
- High7.8Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.32%Jun 6, 2025
- High7.32BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.33%Jun 6, 2025
- Low3.7SpiceDB is an open source database for storing and querying fine-grained authorization data.Check if you run itEPSS 0.32%Jun 6, 2025
- High7.5CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 1.19%Jun 6, 2025
- High8.3An improper certificate validation vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.26%Jun 6, 2025
Sort