Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.41%Aug 26, 2025
- Medium5.3A vulnerability has been found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.36%Aug 26, 2025
- Medium4.8A vulnerability was detected in mtons mblog up to 3.5.0.Check if you run itEPSS 0.27%Aug 26, 2025
- Critical9.1Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are stored in plaintext within log files on thCheck if you run itEPSS 0.24%Aug 26, 2025
- Medium5.4IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgtCheck if you run itEPSS 0.28%Aug 26, 2025
- Critical9.1Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions viCheck if you run itEPSS 0.32%Aug 26, 2025
- Medium5.3A vulnerability was identified in GreenCMS up to 2.3.0603.Check if you run itEPSS 0.35%Aug 25, 2025
- High8.8Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.52%Aug 25, 2025
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 32.87%Aug 25, 2025
- Medium5.1A vulnerability was found in HuangDou UTCMS 9.Check if you run itEPSS 0.36%Aug 25, 2025
- Medium6.3A vulnerability has been found in HuangDou UTCMS 9.Check if you run itEPSS 0.43%Aug 25, 2025
- High8.6Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP ObjectCheck if you run itEPSS 0.73%Aug 25, 2025
- Medium5.3Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attCheck if you run itEPSS 0.59%Aug 25, 2025
- Critical9.8Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device'Check if you run itEPSS 0.62%Aug 25, 2025
- Medium5.1Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.Check if you run itEPSS 0.27%Aug 25, 2025
- Medium6.1An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7.Check if you run itEPSS 0.25%Aug 25, 2025
- High7.5Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the reCheck if you run itEPSS 0.41%Aug 25, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- High8.7A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 1.05%Aug 23, 2025
- High8.1The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.40%Aug 23, 2025
- Medium4.3The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.Check if you run itEPSS 0.11%Aug 23, 2025
- Medium4.3The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6.Check if you run itEPSS 0.13%Aug 23, 2025
- Medium4.3The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Aug 23, 2025
- Critical9.8The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9.Check if you run itEPSS 0.49%Aug 23, 2025
- Medium5.1Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.Check if you run itEPSS 0.32%Aug 23, 2025
Sort