Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation.Check if you run itEPSS 0.27%Dec 3, 2025
- Critical9.1XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.Check if you run itEPSS 0.46%Dec 3, 2025
- High7.7Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature.Check if you run itEPSS 0.30%Dec 3, 2025
- Medium5.1The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege escalation.Check if you run itEPSS 0.18%Dec 3, 2025
- Medium6.2Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file ~/Library/Application Support/Aquarius/aquarius.settings using a weak obfuscation schemeCheck if you run itEPSS 0.22%Dec 3, 2025
- Medium6.5alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.Check if you run itEPSS 0.59%Dec 3, 2025
- High7.5Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory.Check if you run itEPSS 0.26%Dec 3, 2025
- Critical9.0In ERPNext v15.83.2 and Frappe Framework v15.86.0, improper validation of uploaded SVG avatar images allows attackers to embed malicious JavaScript.Check if you run itEPSS 0.37%Dec 3, 2025
- Critical9.8An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g.Check if you run itEPSS 0.55%Dec 3, 2025
- Medium5.5An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requCheck if you run itEPSS 0.35%Dec 3, 2025
- Medium5.5Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directivesCheck if you run itEPSS 0.35%Dec 3, 2025
- Medium6.2A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS.Check if you run itEPSS 0.20%Dec 3, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrarCheck if you run itEPSS 0.52%Dec 3, 2025
- High8.8AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function.Check this weekEPSS 17.06%Dec 3, 2025
- Medium6.5AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the test_mail function.Check if you run itEPSS 2.40%Dec 3, 2025
- High8.8AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary.Check if you run itEPSS 3.33%Dec 3, 2025
- High8.8AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint.Check if you run itEPSS 2.81%Dec 3, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Dec 3, 2025
- Medium6.2A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS.Check if you run itEPSS 0.22%Dec 3, 2025
- High7.5An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200.Check if you run itEPSS 0.36%Dec 3, 2025
- Medium5.3An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, MoCheck if you run itEPSS 0.31%Dec 3, 2025
- High7.8The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escCheck if you run itEPSS 0.16%Dec 3, 2025
- Medium5.1Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe in the function main.cpp, which can leaCheck if you run itEPSS 0.22%Dec 3, 2025
- High8.4A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7.Check if you run itEPSS 0.26%Dec 3, 2025
- Critical10.0wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.68%Dec 3, 2025
Sort