Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability.Check if you run itEPSS 0.54%Aug 22, 2025
- Medium6.5JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQLCheck if you run itEPSS 0.24%Aug 22, 2025
- High8.1An issue was discovered in Shopizer 3.2.7.Check if you run itEPSS 0.22%Aug 22, 2025
- Medium5.3MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored in the data directory, readable by allCheck if you run itEPSS 0.25%Aug 22, 2025
- High7.8An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalaCheck if you run itEPSS 0.19%Aug 22, 2025
- Critical9.8spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.Check if you run itEPSS 0.50%Aug 22, 2025
- High7.8In MindManager Windows versions prior to 24.1.150, attackers could potentially write to unexpected directories in victims' machines via directory traversal if victims opened file aCheck if you run itEPSS 0.38%Aug 22, 2025
- Critical9.8Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication.Check if you run itEPSS 0.58%Aug 22, 2025
- Critical9.8An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute arbitrary code via a crafted URL.Check if you run itEPSS 0.80%Aug 22, 2025
- Critical9.8MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability.Check if you run itEPSS 0.68%Aug 22, 2025
- Medium6.5Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.Check if you run itEPSS 0.34%Aug 22, 2025
- Critical9.8Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface.Check if you run itEPSS 0.66%Aug 22, 2025
- Critical10.0Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspCheck if you run itEPSS 0.80%Aug 22, 2025
- Low2.1A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 202Check if you run itEPSS 0.21%Aug 21, 2025
- Medium4.8A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowiCheck if you run itEPSS 0.21%Aug 21, 2025
- Critical9.3Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server.Check if you run itEPSS 1.47%Aug 21, 2025
- High8.4Xenorate versions up to and including 2.50, a Windows-based multimedia player, is vulnerable to a stack-based buffer overflow when processing .xpl playlist files.Check if you run itEPSS 0.39%Aug 21, 2025
- Critical9.3Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command.Check if you run itEPSS 1.38%Aug 21, 2025
- High8.4VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawing files.Check if you run itEPSS 0.41%Aug 21, 2025
- High8.4Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files.Check if you run itEPSS 0.41%Aug 21, 2025
- High8.5Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser.Check if you run itEPSS 0.58%Aug 21, 2025
- High8.4Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls playlist files.Check if you run itEPSS 0.56%Aug 21, 2025
- High8.4Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened.Check if you run itEPSS 0.43%Aug 21, 2025
- High8.5Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser.Check if you run itEPSS 0.58%Aug 21, 2025
- High8.4gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files.Check if you run itEPSS 0.41%Aug 21, 2025
Sort