Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read.Check if you run itEPSS 0.59%Apr 17, 2025
- High7.6An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path.Check if you run itEPSS 0.43%Apr 17, 2025
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function.Check if you run itEPSS 0.37%Apr 17, 2025
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function.Check if you run itEPSS 0.44%Apr 17, 2025
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function.Check if you run itEPSS 0.44%Apr 17, 2025
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function.Check if you run itEPSS 0.44%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component.Check if you run itEPSS 0.39%Apr 17, 2025
- High7.6An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component.Check if you run itEPSS 0.43%Apr 17, 2025
- High7.6An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component.Check if you run itEPSS 0.43%Apr 17, 2025
- Medium6.5An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.2An issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a physically proximate attacker to obtain sensitive information.Check if you run itEPSS 0.20%Apr 17, 2025
- High7.2In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability.Check if you run itEPSS 0.40%Apr 17, 2025
- High7.5DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS trafCheck if you run itEPSS 0.20%Apr 16, 2025
- Medium4.9Overview XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities.Check if you run itEPSS 0.45%Apr 16, 2025
- Medium4.9Overview XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities.Check if you run itEPSS 0.43%Apr 16, 2025
- Critical9.1Overview The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that mCheck if you run itEPSS 0.96%Apr 16, 2025
- Medium6.1Overview The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.Check if you run itEPSS 0.15%Apr 16, 2025
- Medium4.7XWiki Platform is a generic wiki platform.Check if you run itEPSS 0.32%Apr 16, 2025
- High7.8Omnissa Horizon Client for Windows contains an LPE Vulnerability.Check if you run itEPSS 0.15%Apr 16, 2025
- High8.2Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.36%Apr 16, 2025
- Medium4.3Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which aCheck if you run itEPSS 0.29%Apr 16, 2025
Sort