Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by root but world-Check if you run itEPSS 0.28%Mar 5, 2026
- UnknownCVE-2025-64661 - Security Update Guide - Microsoft - Windows Shell Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.27%Mar 5, 2026
- UnknownCVE-2025-62468 - Security Update Guide - Microsoft - Windows Defender Firewall Service Information Disclosure VulnerabilityCheck if you run itEPSS 0.54%Mar 5, 2026
- UnknownCVE-2025-55233 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit in Windows Projected File System bezüglich RechteerweiterungenCheck if you run itEPSS 0.43%Mar 5, 2026
- UnknownCVE-2025-62554 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit in Microsoft Office bezüglich RemotecodeausführungCheck if you run itEPSS 0.47%Mar 5, 2026
- UnknownCVE-2025-62552 - Security Update Guide - Microsoft - Microsoft Access Remote Code Execution VulnerabilityCheck if you run itEPSS 0.64%Mar 5, 2026
- UnknownCVE-2025-62465 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsrisiko durch Denial-of-Service im DirectX-GrafikkernelCheck if you run itEPSS 0.49%Mar 5, 2026
- UnknownCVE-2025-64679 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit in der Windows DWM-Core-Bibliothek bezüglich RechteerweiterungenCheck if you run itEPSS 0.48%Mar 5, 2026
- UnknownCVE-2024-42134 - Security Update Guide - Microsoft - virtio-pci: Check if is_avq is NULLCheck if you run itEPSS 0.19%Mar 5, 2026
- UnknownCVE-2025-64680 - Security Update Guide - Microsoft - Windows DWM Core Library Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.40%Mar 5, 2026
- UnknownCVE-2025-62467 - Security Update Guide - Microsoft - Windows Projected File System Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.43%Mar 5, 2026
- Medium4.9The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0.Check if you run itEPSS 0.52%Mar 5, 2026
- Medium6.4The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _ob_spacerat_link, _ob_bbad_link, and _ob_teleporter_link URL parameterCheck if you run itEPSS 0.22%Mar 5, 2026
- Medium6.5The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.1.17.Check if you run itEPSS 0.26%Mar 5, 2026
- High7.2The Fluent Forms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AJAX action in all versions up to, and including, 6.1.17.Check if you run itEPSS 0.30%Mar 5, 2026
- Critical9.2The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory.Check if you run itEPSS 0.19%Mar 5, 2026
- High8.5UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary codeCheck if you run itEPSS 0.18%Mar 5, 2026
- High8.4UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a dirCheck if you run itEPSS 0.18%Mar 5, 2026
- Critical9.1Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator.Check if you run itEPSS 0.45%Mar 5, 2026
- High8.5Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver allows a local unprivileged attacCheck if you run itEPSS 0.16%Mar 5, 2026
- Critical9.1Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.Check if you run itEPSS 0.64%Mar 5, 2026
- High7.1IDC SFX2100 Satalite Recievers set the file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-Check if you run itEPSS 0.12%Mar 5, 2026
- Critical9.8UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library.Check if you run itEPSS 0.46%Mar 5, 2026
- Critical9.8Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.Check if you run itEPSS 0.62%Mar 5, 2026
- Critical9.8Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely.Check if you run itEPSS 0.50%Mar 5, 2026
Sort