Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme functionCheck if you run itEPSS 0.27%Oct 24, 2025
- High7.6PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme functionCheck if you run itEPSS 0.29%Oct 24, 2025
- Medium5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath functionCheck if you run itEPSS 0.32%Oct 24, 2025
- Medium6.2An issue was discovered in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16348) allowing local authenticated attackers to send a crafted IOCTL request to the driverCheck if you run itEPSS 0.13%Oct 24, 2025
- Medium6.8An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via suppCheck if you run itEPSS 0.14%Oct 24, 2025
- UnknownDO NOT USE THIS CVE RECORD.Open the advisoryOct 24, 2025
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficieCheck if you run itEPSS 0.23%Oct 23, 2025
- Medium6.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.51%Oct 23, 2025
- Medium6.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.51%Oct 23, 2025
- High8.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.62%Oct 23, 2025
- High8.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.62%Oct 23, 2025
- High8.2A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.62%Oct 23, 2025
- Critical9.3A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19.Check if you run itEPSS 0.66%Oct 23, 2025
- Critical10.0Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.77%Oct 23, 2025
- High7.3Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.38%Oct 23, 2025
- High7.7Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.55%Oct 23, 2025
- High8.8Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.Check if you run itEPSS 0.17%Oct 23, 2025
- Medium6.4A container privilege escalation flaw was found in certain Container-native Virtualization images.Check if you run itEPSS 0.19%Oct 23, 2025
- Medium5.9Rollbar.js offers error tracking and logging from Javascript to Rollbar.Check if you run itEPSS 0.39%Oct 23, 2025
- Critical9.4The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler.Check if you run itEPSS 1.39%Oct 23, 2025
- High7.1The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover.Check if you run itEPSS 0.45%Oct 23, 2025
- UnknownHCSEC-2025-32 - Incomplete Fix For Previous Vault DoS IssueCheck if you run itEPSS 0.73%Oct 23, 2025
- High7.5Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads.Check if you run itEPSS 0.53%Oct 23, 2025
- High8.1Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accountsCheck if you run itEPSS 0.49%Oct 23, 2025
- High7.2Diagnostics command injection vulnerabilityCheck this weekEPSS 13.43%Oct 23, 2025
Sort