Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser.Check if you run itEPSS 1.19%Aug 20, 2025
- High8.7Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake.Check if you run itEPSS 1.31%Aug 20, 2025
- Critical9.3FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface.Check if you run itEPSS 1.52%Aug 20, 2025
- High8.4Foxit PDF Reader < 4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on disk.Check if you run itEPSS 0.45%Aug 20, 2025
- High8.5FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server.Check if you run itEPSS 0.41%Aug 20, 2025
- Medium5.1A security vulnerability has been detected in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.30%Aug 20, 2025
- Medium5.1OnboardLite is the result of the Influx Initiative, our vision for an improved student organization lifecycle at the University of Central Florida.Check if you run itEPSS 0.32%Aug 20, 2025
- High8.4AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files.Check if you run itEPSS 0.58%Aug 20, 2025
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.34%Aug 20, 2025
- Medium6.3Frappe is a full-stack web application framework.Check if you run itEPSS 0.38%Aug 20, 2025
- Medium5.4IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.18%Aug 20, 2025
- Medium6.1IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.Check if you run itEPSS 0.11%Aug 20, 2025
- Medium6.5IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.50%Aug 20, 2025
- High7.1Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Check if you run itEPSS 0.17%Aug 20, 2025
- Medium4.9CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an authentiCheck if you run itEPSS 0.60%Aug 20, 2025
- High7.2CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker wiCheck if you run itEPSS 0.91%Aug 20, 2025
- High7.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a maliCheck if you run itEPSS 0.45%Aug 20, 2025
- High7.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulCheck if you run itEPSS 0.45%Aug 20, 2025
- High8.7CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted dataCheck if you run itEPSS 0.68%Aug 20, 2025
- Critical9.3A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 bCheck if you run itEPSS 1.90%Aug 20, 2025
- Medium4.6QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality.Check if you run itEPSS 0.23%Aug 20, 2025
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality.Check if you run itEPSS 0.13%Aug 20, 2025
- High8.4CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access mCheck if you run itEPSS 0.19%Aug 20, 2025
- Medium4.8QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality.Check if you run itEPSS 0.19%Aug 20, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.26%Aug 20, 2025
Sort