Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8.Check if you run itEPSS 2.06%Jul 31, 2025
- Critical9.3A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function.Check if you run itEPSS 4.79%Jul 31, 2025
- Critical10.0ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.Check if you run itEPSS 4.07%Jul 31, 2025
- High8.4A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration fCheck if you run itEPSS 0.56%Jul 31, 2025
- Critical9.5A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authenticationCheck if you run itEPSS 2.47%Jul 31, 2025
- Critical10.0Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentiCheck if you run itEPSS 1.37%Jul 31, 2025
- High8.8A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier.Check if you run itEPSS 2.97%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0.Check if you run itEPSS 0.52%Jul 31, 2025
- Medium4.3The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to an improper capability check on the 'ajax_trash_Check if you run itEPSS 0.33%Jul 31, 2025
- Medium6.1A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browseCheck if you run itEPSS 0.47%Jul 31, 2025
- High7.5A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to execute javascript in the victim's browser and get some sensCheck if you run itEPSS 0.56%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10.Check if you run itEPSS 0.44%Jul 31, 2025
- High8.8Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file withCheck if you run itEPSS 0.43%Jul 31, 2025
- High7.0pyjwt v2.10.1 was discovered to contain weak encryption.Check if you run itEPSS 0.18%Jul 31, 2025
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.09%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- Medium6.5** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.Check if you run itEPSS 0.63%Jul 30, 2025
- Medium4.9The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient esCheck if you run itEPSS 0.39%Jul 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be chCheck if you run itEPSS 0.19%Jul 30, 2025
- Medium6.0The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.21%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.18%Jul 30, 2025
- Medium6.0The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.17%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.18%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.22%Jul 30, 2025
- High8.2The vulnerability was identified in the code developed specifically for Lenovo.Check if you run itEPSS 0.23%Jul 30, 2025
Sort