Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityPatch nowKEVEPSS 4.04%Nov 5, 2025
- Medium6.1A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3 allows attackers to execute arbitrary JavaScript in the context of a logged-in user's session bCheck if you run itEPSS 0.23%Nov 5, 2025
- High7.2A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 2023.3 allows authenticated attackers to inject arbitrary web scripts or HTML vCheck if you run itEPSS 0.25%Nov 5, 2025
- Critical9.8PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component.Check if you run itEPSS 1.18%Nov 5, 2025
- High7.5DWSurvey 6.14.0 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.32%Nov 5, 2025
- Medium5.3ownCloud guests Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.95%Nov 5, 2025
- Medium5.4OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface.Check if you run itEPSS 0.22%Nov 5, 2025
- Medium5.3codeshare v1.0.0 was discovered to contain an information leakage vulnerability.Check if you run itEPSS 0.33%Nov 4, 2025
- Medium6.5An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500.Check if you run itEPSS 0.22%Nov 4, 2025
- Critical9.8An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400.Check if you run itEPSS 0.39%Nov 4, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Medium6.1Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1.Check if you run itEPSS 0.30%Nov 3, 2025
- Medium5.4Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.Check if you run itEPSS 0.25%Nov 3, 2025
- High7.5Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service (DoS) condition in the HTTP connection handling layer, wCheck if you run itEPSS 0.40%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.8DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.Check if you run itEPSS 0.16%Oct 31, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vfs: Don't leak disconnected dentries on umount When user calls open_by_handle_at() on some inode that is not caCheck if you run itEPSS 0.17%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in theCheck if you run itEPSS 0.15%Oct 30, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: cifs: parse_dfs_referrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTL_DCheck if you run itEPSS 0.41%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict oCheck if you run itEPSS 0.22%Oct 30, 2025
- High7.5A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.Check if you run itEPSS 0.38%Oct 30, 2025
- High8.8An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter.Check if you run itEPSS 0.56%Oct 30, 2025
Sort