Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6WWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket PluginCheck if you run itEPSS 0.38%Jun 4, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- UnknownHPESBNW05062 rev.1 - Status of OpenSSH Keystroke Obfuscation Bypass (CVE-2024-39894) on ArubaOS-CXCheck if you run itEPSS 1.63%Jun 4, 2026
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityPatch nowKEVEPSS 48.00%Jun 4, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 99.79%Jun 4, 2026
- Medium5.5A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08.Check if you run itEPSS 0.40%Jun 3, 2026
- Low1.1A vulnerability was determined in sgl-project SGLang up to 0.5.11.Check if you run itEPSS 0.12%Jun 3, 2026
- High7.7OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.Check if you run itEPSS 0.26%Jun 3, 2026
- Medium5.3Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.3Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSuppo…Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.5A vulnerability was found in crmeb crmeb_java 1.4.Check if you run itEPSS 0.29%Jun 3, 2026
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.11%Jun 3, 2026
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.11%Jun 3, 2026
- High7.3Local privilege escalation due to EXE hijacking vulnerability.Check if you run itEPSS 0.11%Jun 3, 2026
- Medium4.8FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.26%Jun 3, 2026
- High7.3Local privilege escalation due to excessive permissions assigned to child processes.Check if you run itEPSS 0.11%Jun 3, 2026
- Medium6.9FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.28%Jun 3, 2026
- Medium4.1Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_pageCheck if you run itEPSS 0.19%Jun 3, 2026
- Medium5.3A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium6.5libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser.Check if you run itEPSS 0.27%Jun 3, 2026
- Low1.1A vulnerability has been found in mlrun up to 1.12.0-rc3.Check if you run itEPSS 0.07%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes).Check if you run itEPSS 0.25%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp()…Check if you run itEPSS 0.43%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption.Check if you run itEPSS 0.16%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime.Check if you run itEPSS 0.37%Jun 3, 2026
Sort