Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownEyesOfNetwork EyesOfNetwork Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 84.60%Oct 24, 2025
- Unknownamttgroup hibos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.36%Oct 22, 2025
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 38.01%Oct 17, 2025
- UnknownD-Link 'getcfg.php' Component Bypass VulnerabilityPatch nowKEVEPSS 22.68%Oct 15, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%Oct 14, 2025
- Medium5.3A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10.Check if you run itEPSS 0.38%Oct 9, 2025
- Unknownjoomlaserviceprovider wsecure Improper Input ValidationPatch nowKEVEPSS 8.98%Oct 8, 2025
- Unknownatutor atutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.50%Oct 2, 2025
- Medium5.1In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/stringsCheck this weekEPSS 33.00%Oct 1, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scriptsCheck this weekEPSS 97.00%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /Check this weekEPSS 52.00%Sep 29, 2025
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side requestCheck this weekEPSS 78.00%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck this weekEPSS 53.00%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck this weekEPSS 53.00%Sep 29, 2025
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blindCheck this weekEPSS 74.00%Sep 29, 2025
- High8.8Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side requestCheck this weekEPSS 81.00%Sep 29, 2025
- High8.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanisCheck this weekEPSS 59.00%Sep 29, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side rCheck this weekEPSS 55.00%Sep 29, 2025
- Medium6.3SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.Check this weekEPSS 37.00%Sep 22, 2025
- Critical9.3Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead codeCheck if you run itEPSS 1.41%Sep 19, 2025
- Critical9.3Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 (VA and SaaS deployments) contain insecure defauCheck this weekEPSS 54.00%Sep 19, 2025
- High8.4Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability inCheck this weekEPSS 31.00%Sep 19, 2025
- Critical9.3Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and SaaS deployments) contain multiple DockeCheck this weekEPSS 87.00%Sep 19, 2025
- Medium5.5A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.40%Sep 19, 2025
- Low2.1A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.44%Sep 19, 2025