Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File InclusiCheck if you run itEPSS 0.53%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local FilCheck if you run itEPSS 0.53%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File InCheck if you run itEPSS 0.53%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-homes allows PHP Local File InclusCheck if you run itEPSS 0.53%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File InclusiCheck if you run itEPSS 0.53%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows ReflectedCheck if you run itEPSS 0.25%Mar 25, 2026
- High8.8OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'search' parametCheck if you run itEPSS 0.35%Mar 25, 2026
- Medium6.9Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads.Check if you run itEPSS 0.36%Mar 25, 2026
- Critical9.8pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter.Check if you run itEPSS 2.56%Mar 25, 2026
- Medium6.5Kiteworks is a private data network (PDN).Check if you run itEPSS 1.08%Mar 25, 2026
- Critical9.8In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.Check if you run itEPSS 0.56%Mar 25, 2026
- Critical9.8In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.Check if you run itEPSS 0.56%Mar 25, 2026
- Critical9.0In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.Check if you run itEPSS 0.35%Mar 25, 2026
- Medium4.8A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7.Check if you run itEPSS 0.15%Mar 25, 2026
- High8.7A SQL Injection vulnerability has been found in Support Board v3.7.7.Patch nowKEVEPSS 0.38%Mar 25, 2026
- Medium5.4A use-after-return vulnerability exists in the server when handling DNS queries signed with SIG(0).Check if you run itEPSS 0.38%Mar 25, 2026
- Medium6.5Under certain conditions, may crash when processing a correctly signed query containing a TKEY record.Check if you run itEPSS 0.60%Mar 25, 2026
- High8.5Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and…Check if you run itEPSS 0.15%Mar 25, 2026
- Medium5.1Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modific…Check if you run itEPSS 0.10%Mar 25, 2026
- High7.2Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized m…Check if you run itEPSS 0.22%Mar 25, 2026
- High8.8A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network ran…Check if you run itEPSS 0.41%Mar 25, 2026
- High7.2A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32.Check if you run itEPSS 0.34%Mar 25, 2026
- High7.7An issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive information via the cryptographic scheme.Check if you run itEPSS 0.13%Mar 25, 2026
- High7.5A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain.Check if you run itEPSS 0.73%Mar 25, 2026
- Low3.3When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unn…Check if you run itEPSS 0.12%Mar 25, 2026
Sort