Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5It was possible to craft an email that showed a tracking link as an attachment.Check if you run itEPSS 0.39%May 14, 2025
- High8.1Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context.Check if you run itEPSS 0.47%May 14, 2025
- High7.5Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used.Check if you run itEPSS 0.40%May 14, 2025
- Critical9.8Rallly is an open-source scheduling and collaboration tool.Check if you run itEPSS 0.63%May 14, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check if you run itEPSS 1.01%May 14, 2025
- Medium6.2Bullfrog's DNS over TCP bypasses domain filteringCheck if you run itEPSS 0.49%May 14, 2025
- Medium5.0iTop is an web based IT Service Management tool.Check if you run itEPSS 0.28%May 14, 2025
- Medium5.0iTop is an web based IT Service Management tool.Check if you run itEPSS 0.27%May 14, 2025
- Medium6.5iTop is an web based IT Service Management tool.Check if you run itEPSS 0.35%May 14, 2025
- High7.8A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component.Check if you run itEPSS 0.18%May 14, 2025
- Medium5.3The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1Check if you run itEPSS 0.35%May 14, 2025
- Critical9.1The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automatCheck if you run itEPSS 0.87%May 14, 2025
- High7.5WS-WN572HP3 V230525 was discovered to contain a buffer overflow in the component /www/cgi-bin/upload.cgi.Check if you run itEPSS 0.48%May 14, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the passworCheck if you run itEPSS 0.28%May 14, 2025
- Medium4.6An issue in realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting functioCheck if you run itEPSS 0.23%May 14, 2025
- High8.1Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode.Check if you run itEPSS 0.24%May 14, 2025
- Medium5.5An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file.Check if you run itEPSS 0.16%May 14, 2025
- Medium6.1An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47.Check if you run itEPSS 0.43%May 14, 2025
- Medium5.6Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when using Intel(R) Trust Domain Extensions (Intel(R) TDX) or InCheck if you run itEPSS 0.14%May 13, 2025
- High7.1Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unauthenticated user to potentially enable deniCheck if you run itEPSS 0.27%May 13, 2025
- Low2.0Protection mechanism failure for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege viaCheck if you run itEPSS 0.14%May 13, 2025
- Medium6.8ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that couldCheck this weekEPSS 58.20%May 13, 2025
- Medium5.4Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scriCheck if you run itEPSS 0.28%May 13, 2025
- Medium6.1Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulneCheck if you run itEPSS 0.29%May 13, 2025
- Medium6.1Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulneCheck if you run itEPSS 0.36%May 13, 2025
Sort