Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL.Check if you run itEPSS 0.14%Oct 29, 2025
- Medium5.8An unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote attacker to cause the server to issue HTTP reCheck if you run itEPSS 0.29%Oct 29, 2025
- High8.2SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution.Check if you run itEPSS 0.32%Oct 29, 2025
- Medium6.5SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.Check if you run itEPSS 0.27%Oct 29, 2025
- Medium6.7memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101).Check if you run itEPSS 0.14%Oct 29, 2025
- High7.8An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder.Check if you run itEPSS 0.14%Oct 29, 2025
- Low3.0The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSICheck if you run itEPSS 0.38%Oct 29, 2025
- Medium6.1LiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 29, 2025
- Medium6.5anti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewall Missing AuthorizationPatch nowKEVEPSS 0.46%Oct 29, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.90%Oct 29, 2025
- Critical9.3D-Link dns-343_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.81%Oct 29, 2025
- Critical9.8dnnsoftware DotNetNuke (DNN) Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 46.97%Oct 28, 2025
- Medium6.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.19%Oct 28, 2025
- Medium4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.23%Oct 28, 2025
- Medium5.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.23%Oct 28, 2025
- Medium5.3FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.28%Oct 28, 2025
- Medium5.4Sharp is a content management framework built for Laravel as a package.Check if you run itEPSS 0.22%Oct 28, 2025
- Low3.8GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced security.Check if you run itEPSS 0.13%Oct 28, 2025
- High8.5HP ThinPro 8.1 System management application failed to verify user's true id.Check if you run itEPSS 0.27%Oct 28, 2025
- Medium6.5Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation.Check if you run itEPSS 0.43%Oct 28, 2025
- Medium6.5Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header.Check if you run itEPSS 0.43%Oct 28, 2025
- Critical9.1Taiga is an open source project management platform.Check if you run itEPSS 1.55%Oct 28, 2025
- High7.2Astro is a web framework that includes an image proxy.Check if you run itEPSS 0.35%Oct 28, 2025
- Medium6.3Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.29%Oct 28, 2025
- High7.5Starlette is a lightweight ASGI framework/toolkit.Check if you run itEPSS 0.80%Oct 28, 2025
Sort