Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.Check if you run itEPSS 0.45%May 13, 2025
- Medium4.3An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.Check if you run itEPSS 0.28%May 12, 2025
- High8.6netalertx netalertx Execution After Redirect (EAR)Patch nowKEVEPSS 67.91%May 12, 2025
- High7.3A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819.Check if you run itEPSS 0.20%May 11, 2025
- Medium6.3A security flaw has been discovered in Dígitro NGC Explorer up to 3.48.21.Check if you run itEPSS 0.62%May 11, 2025
- High8.3code-server runs VS Code on any machine anywhere through browser access.Check this weekEPSS 44.54%May 9, 2025
- High7.0In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.Check if you run itEPSS 0.22%May 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() and p9_client_read_once(Check if you run itEPSS 0.72%May 9, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_sCheck if you run itEPSS 0.78%May 9, 2025
- High8.8The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on tCheck if you run itEPSS 1.59%May 9, 2025
- High7.3A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0.Check if you run itEPSS 0.28%May 9, 2025
- Critical9.8SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.Check if you run itEPSS 0.76%May 9, 2025
- Critical9.8SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.Check if you run itEPSS 0.42%May 9, 2025
- Critical9.8Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_filCheck if you run itEPSS 1.20%May 9, 2025
- Critical9.8SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter.Check if you run itEPSS 0.42%May 9, 2025
- Critical9.8SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.Check if you run itEPSS 0.52%May 9, 2025
- Critical9.8SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.Check if you run itEPSS 0.67%May 9, 2025
- High8.8Jan v0.5.14 and before is vulnerable to remote code execution (RCE) when the user clicks on a rendered link in the conversation, due to opening external website in the app and theCheck if you run itEPSS 0.62%May 9, 2025
- High7.5In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE.Check if you run itEPSS 0.78%May 8, 2025
- High7.2In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body.Check if you run itEPSS 0.55%May 8, 2025
- Medium6.1The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’ parameter in all versions up to, and includingCheck if you run itEPSS 0.33%May 8, 2025
- High8.8ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.Check if you run itEPSS 0.62%May 8, 2025
- High8.7When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.43%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025