Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.Check if you run itEPSS 0.65%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parametersCheck if you run itEPSS 0.30%Aug 7, 2025
- Critical9.3Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access.Check if you run itEPSS 0.56%Aug 6, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.Check if you run itEPSS 0.40%Aug 6, 2025
- Medium6.9OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1.Check if you run itEPSS 1.05%Aug 6, 2025
- Critical9.8The Reveal Listing plugin by smartdatasoft for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.3.Check if you run itEPSS 0.41%Aug 6, 2025
- High8.8Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.76%Aug 6, 2025
- Medium5.3In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collectCheck if you run itEPSS 0.36%Aug 6, 2025
- High8.1A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface.Check this weekEPSS 13.64%Aug 6, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- Medium4.8Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversation Messages Dashboard Page.Check if you run itEPSS 0.33%Aug 5, 2025
- Low2.0Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.Check if you run itEPSS 0.44%Aug 5, 2025
- High8.6Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via craCheck if you run itEPSS 1.41%Aug 5, 2025
- Critical9.4Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability.Check if you run itEPSS 1.49%Aug 5, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.27%Aug 5, 2025
- Medium4.8A vulnerability classified as problematic was found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.27%Aug 5, 2025
- Medium4.8A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.27%Aug 5, 2025
- Medium5.1A vulnerability was found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.27%Aug 5, 2025
- High7.5The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpie_tempalte_import' function in all versions upCheck if you run itEPSS 0.70%Aug 5, 2025
- Medium4.8A vulnerability was found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.65%Aug 5, 2025
- Medium6.3A vulnerability was found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.45%Aug 5, 2025
- Medium6.9A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0.Check if you run itEPSS 0.48%Aug 5, 2025
- Medium4.5EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP.Check if you run itEPSS 0.25%Aug 5, 2025
- Medium6.5Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator.Check if you run itEPSS 0.24%Aug 5, 2025
- Medium6.5An Authentication Bypass vulnerability in Blue Access' Cobalt X1 thru 02.000.187 allows an unauthorized attacker to log into the application as an administrator without valid credeCheck if you run itEPSS 0.30%Aug 5, 2025
Sort