Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3.Check if you run itEPSS 0.29%Dec 26, 2025
- High7.5Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privCheck if you run itEPSS 0.44%Dec 26, 2025
- High7.5Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an administrative endpoint.Check if you run itEPSS 0.57%Dec 26, 2025
- Medium6.5The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (Check if you run itEPSS 0.17%Dec 26, 2025
- Medium6.5SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter.Check if you run itEPSS 0.28%Dec 26, 2025
- High8.8An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic componenCheck if you run itEPSS 0.60%Dec 26, 2025
- Medium4.3Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal.Check if you run itEPSS 0.66%Dec 26, 2025
- Medium5.1An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nokia 808 (Delight v1.8), Nokia N8 (Delight v6.7), Nokia E7 (Delight v1.3), Nokia C7Check if you run itEPSS 0.14%Dec 26, 2025
- High7.5A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document.Check if you run itEPSS 0.42%Dec 26, 2025
- Critical9.8Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.Check if you run itEPSS 0.38%Dec 26, 2025
- Medium6.2An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to obtain sensitive information via the adopt component of the Sciter video rendering function.Check if you run itEPSS 0.18%Dec 26, 2025
- UnknownAdobe ColdFusion Deserialization of Untrusted DataPatch nowKEVEPSS 80.18%Dec 26, 2025
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 84.81%Dec 26, 2025
- Critical9.5Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for tCheck if you run itEPSS 0.50%Dec 25, 2025
- High8.7A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114.Check if you run itEPSS 0.85%Dec 25, 2025
- Medium5.3The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorrect authorization checCheck if you run itEPSS 0.32%Dec 25, 2025
- Medium5.3A vulnerability was detected in ketr JEPaaS up to 7.2.8.Check if you run itEPSS 0.27%Dec 25, 2025
- Medium5.3A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0.Check if you run itEPSS 0.27%Dec 25, 2025
- Medium6.4ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name.Check if you run itEPSS 0.20%Dec 25, 2025
- Medium6.4ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window.Check if you run itEPSS 0.20%Dec 25, 2025
- Low1.0A vulnerability was determined in TOZED ZLT M30s up to 1.47.Check if you run itEPSS 0.27%Dec 25, 2025
- Medium6.9A vulnerability was found in TOZED ZLT M30s up to 1.47.Check if you run itEPSS 0.70%Dec 25, 2025
- Medium5.3A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308.Check if you run itEPSS 2.55%Dec 25, 2025
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and Information Technology Industry and Trade LtdCheck if you run itEPSS 0.30%Dec 25, 2025
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and Information Technology Industry and Trade LtdCheck if you run itEPSS 0.33%Dec 25, 2025
Sort