Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /u…Check if you run itEPSS 3.14%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wan_conf i…Check if you run itEPSS 3.05%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireless in fil…Check if you run itEPSS 3.05%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi in file /…Check if you run itEPSS 2.25%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in fi…Check if you run itEPSS 1.98%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_service in file…Check if you run itEPSS 3.46%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /…Check if you run itEPSS 2.44%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the check_changes in file…Check if you run itEPSS 2.38%Dec 11, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a…Check if you run itEPSS 0.54%Dec 11, 2025
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute a…Check if you run itEPSS 0.57%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator v…Check if you run itEPSS 0.21%Dec 11, 2025
- High8.8An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading…Check if you run itEPSS 0.53%Dec 11, 2025
- High8.4MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.Check if you run itEPSS 0.12%Dec 10, 2025
- High8.4MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.Check if you run itEPSS 0.12%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.20%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.8The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4.Check if you run itEPSS 0.45%Dec 10, 2025
- Low2.7A flaw was found in Keycloak Admin REST (Representational State Transfer) API.Check if you run itEPSS 0.35%Dec 10, 2025