Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 seriesCheck if you run itEPSS 0.23%Dec 17, 2025
- Medium5.1Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier.Check if you run itEPSS 0.13%Dec 17, 2025
- High8.5ListCheck.exe developed by Acer has a Local Privilege Escalation vulnerability.Check if you run itEPSS 0.12%Dec 17, 2025
- High7.0Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd.Check if you run itEPSS 0.35%Dec 17, 2025
- Medium6.4The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attack vectors in all versCheck if you run itEPSS 0.30%Dec 17, 2025
- High7.0Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability.Check if you run itEPSS 0.35%Dec 17, 2025
- High7.0Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability.Check if you run itEPSS 0.35%Dec 17, 2025
- Medium4.8A security vulnerability has been detected in xiweicheng TMS up to 2.28.0.Check if you run itEPSS 0.28%Dec 17, 2025
- Medium5.1Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000)Check if you run itEPSS 0.09%Dec 17, 2025
- High8.4Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to execute arbitrary code.Check if you run itEPSS 0.26%Dec 17, 2025
- Critical9.9An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server SidCheck if you run itEPSS 6.56%Dec 17, 2025
- High7.1An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modificationCheck if you run itEPSS 0.29%Dec 17, 2025
- High8.4An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6.Check if you run itEPSS 0.12%Dec 17, 2025
- Critical9.8An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6.Check if you run itEPSS 0.32%Dec 17, 2025
- High8.8An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.Check if you run itEPSS 0.14%Dec 17, 2025
- Critical9.8An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*.Check if you run itEPSS 0.37%Dec 17, 2025
- Critical9.8An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.Check if you run itEPSS 0.32%Dec 17, 2025
- Medium5.3An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.Check if you run itEPSS 0.22%Dec 17, 2025
- Critical9.6An issue was discovered in 25.1.2 before 25.1.5.Check if you run itEPSS 0.26%Dec 17, 2025
- Critical9.9An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.Check if you run itEPSS 0.28%Dec 17, 2025
- High7.3A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0.Check if you run itEPSS 0.20%Dec 17, 2025
- Medium6.2A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_pCheck if you run itEPSS 1.32%Dec 17, 2025
- Medium6.8A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.Check if you run itEPSS 0.19%Dec 17, 2025
- High7.2RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.Check if you run itEPSS 0.92%Dec 17, 2025
- High7.5Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.Check if you run itEPSS 0.82%Dec 17, 2025
Sort