Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.Check if you run itEPSS 0.40%Aug 20, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 13.51%Aug 20, 2025
- Medium6.9Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module.Check if you run itEPSS 0.36%Aug 20, 2025
- High8.8XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Meta Info field of the Global PrefCheck if you run itEPSS 3.69%Aug 20, 2025
- Medium4.8XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Administration interface, specifically under the Presentation sectionCheck if you run itEPSS 0.50%Aug 20, 2025
- Medium6.5An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing (CORS) restrictions.Check if you run itEPSS 0.49%Aug 20, 2025
- High8.8A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism.Check if you run itEPSS 0.36%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 65.16%Aug 20, 2025
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- High8.8Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle functCheck if you run itEPSS 0.35%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 23.82%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 16.78%Aug 20, 2025
- UnknownMicrosoft Windows Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 16.50%Aug 20, 2025
- Critical9.3ProFTPD ProFTPD Hidden FunctionalityPatch nowKEVEPSS 13.76%Aug 20, 2025
- Medium4.8A security flaw has been discovered in neurobin shc up to 4.0.3.Check if you run itEPSS 1.17%Aug 19, 2025
- Medium4.8A vulnerability was identified in neurobin shc up to 4.0.3.Check if you run itEPSS 0.20%Aug 19, 2025
- Medium4.8A vulnerability was determined in neurobin shc up to 4.0.3.Check if you run itEPSS 1.18%Aug 19, 2025
- Medium5.1A security flaw has been discovered in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability was identified in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability was determined in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability was found in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium6.1Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks.Check if you run itEPSS 0.17%Aug 19, 2025
- Medium6.1Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks.Check if you run itEPSS 0.16%Aug 19, 2025
- High7.5Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks.Check if you run itEPSS 0.34%Aug 19, 2025
- Critical9.8Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport.Check if you run itEPSS 0.43%Aug 19, 2025
Sort