Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9Emlog is an open source website building system.Check if you run itEPSS 0.77%May 15, 2025
- Medium6.6Emlog is an open source website building system.Check if you run itEPSS 0.51%May 15, 2025
- High7.5Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability.Check if you run itEPSS 0.51%May 15, 2025
- Medium5.3Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability.Check if you run itEPSS 0.54%May 15, 2025
- High8.1Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability.Check if you run itEPSS 0.40%May 15, 2025
- Low3.1Undici is an HTTP/1.1 client for Node.js.Check if you run itEPSS 0.34%May 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.56%May 15, 2025
- Low2.7Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check setting if user doesn't have access to which allows a System Manager to access when is true via System ConsoleCheck if you run itEPSS 0.34%May 15, 2025
- Medium4.3Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information viaCheck if you run itEPSS 0.31%May 15, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0.Check if you run itEPSS 0.56%May 15, 2025
- Critical9.8The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versioCheck if you run itEPSS 1.22%May 15, 2025
- Medium4.3Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to check the correct permissions which allows authenticated users who only have perCheck if you run itEPSS 0.26%May 15, 2025
- Medium5.8Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers toCheck if you run itEPSS 0.35%May 15, 2025
- Medium6.2Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.Check if you run itEPSS 0.08%May 15, 2025
- High7.2The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5Check if you run itEPSS 0.90%May 15, 2025
- Medium5.4The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver.Check if you run itEPSS 0.31%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.Check if you run itEPSS 0.29%May 15, 2025
- Medium6.6net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system.Check if you run itEPSS 0.20%May 14, 2025
- Critical9.8In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log inCheck if you run itEPSS 0.65%May 14, 2025
- Critical9.1In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunctionCheck if you run itEPSS 0.64%May 14, 2025
- Medium5.3Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrCheck if you run itEPSS 0.17%May 14, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsCheck if you run itEPSS 0.56%May 14, 2025
- Low1.2A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScrCheck this weekEPSS 46.30%May 14, 2025
- Medium6.9A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.Check if you run itEPSS 0.46%May 14, 2025
- High8.2A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packetCheck if you run itEPSS 0.44%May 14, 2025
Sort