Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands.Check if you run itEPSS 3.57%Dec 11, 2025
- High8.6Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields.Check if you run itEPSS 0.35%Dec 11, 2025
- Medium5.3XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page sCheck if you run itEPSS 0.43%Dec 11, 2025
- Medium5.3Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields.Check if you run itEPSS 0.37%Dec 11, 2025
- Critical9.3Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium5.3Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields.Check if you run itEPSS 0.26%Dec 11, 2025
- High8.7Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration.Check if you run itEPSS 0.38%Dec 11, 2025
- High8.7reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands.Check if you run itEPSS 3.42%Dec 11, 2025
- Critical9.3dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings.Check if you run itEPSS 1.37%Dec 11, 2025
- Critical9.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.72%Dec 11, 2025
- Medium5.1A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0.Check if you run itEPSS 0.29%Dec 11, 2025
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.Check if you run itEPSS 0.92%Dec 11, 2025
- High7.3In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files.Check if you run itEPSS 0.24%Dec 11, 2025
- Medium5.4A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege.Check if you run itEPSS 0.11%Dec 11, 2025
- High7.3In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crCheck if you run itEPSS 0.22%Dec 11, 2025
- High8.4In AzeoTech DAQFactory release 20.7 (Build 2555), an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution.Check if you run itEPSS 0.29%Dec 11, 2025
- High8.4In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocatedCheck if you run itEPSS 0.35%Dec 11, 2025
- High8.4In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocatCheck if you run itEPSS 0.38%Dec 11, 2025
- Medium5.4Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation direCheck if you run itEPSS 0.10%Dec 11, 2025
- Medium6.9A weakness has been identified in code-projects Class and Exam Timetable Management 1.0.Check if you run itEPSS 0.41%Dec 11, 2025
- Medium6.5The WP Job Portal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.4.0 via the 'downloadCustomUploadedFile' function.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium6.9A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0.Check if you run itEPSS 0.65%Dec 11, 2025
- High7.6IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection.Check if you run itEPSS 0.36%Dec 11, 2025
- High8.1IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.Check if you run itEPSS 0.28%Dec 11, 2025
- High8.8IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of useCheck if you run itEPSS 0.48%Dec 11, 2025
Sort