Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3CE Phoenix v3.0.1 contains a stored cross-site scripting vulnerability in the currencies administration panel that allows attackers to inject malicious scripts.Check if you run itEPSS 0.37%Dec 11, 2025
- High8.6ElkArte Forum 1.1.9 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the theme installation process.Check if you run itEPSS 0.56%Dec 11, 2025
- High8.7FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands.Check if you run itEPSS 3.57%Dec 11, 2025
- High8.6Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields.Check if you run itEPSS 0.35%Dec 11, 2025
- Medium5.3XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page sCheck if you run itEPSS 0.43%Dec 11, 2025
- Medium5.3Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields.Check if you run itEPSS 0.37%Dec 11, 2025
- Critical9.3Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium5.3Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields.Check if you run itEPSS 0.26%Dec 11, 2025
- High8.7Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration.Check if you run itEPSS 0.38%Dec 11, 2025
- High8.7reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands.Check if you run itEPSS 3.42%Dec 11, 2025
- Critical9.3dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings.Check if you run itEPSS 1.37%Dec 11, 2025
- Critical9.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.72%Dec 11, 2025
- Medium5.1A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0.Check if you run itEPSS 0.29%Dec 11, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 2.00%Dec 11, 2025
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.Check if you run itEPSS 0.92%Dec 11, 2025
- High7.3In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files.Check if you run itEPSS 0.24%Dec 11, 2025
- Medium5.4A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege.Check if you run itEPSS 0.11%Dec 11, 2025
- High7.3In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crCheck if you run itEPSS 0.22%Dec 11, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 2.00%Dec 11, 2025
- High8.4In AzeoTech DAQFactory release 20.7 (Build 2555), an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution.Check if you run itEPSS 0.29%Dec 11, 2025
- High8.4In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocatedCheck if you run itEPSS 0.35%Dec 11, 2025
- High8.4In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocatCheck if you run itEPSS 0.38%Dec 11, 2025
- Medium5.4Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation direCheck if you run itEPSS 0.10%Dec 11, 2025
- Medium6.9A weakness has been identified in code-projects Class and Exam Timetable Management 1.0.Check if you run itEPSS 0.41%Dec 11, 2025
- Medium6.5The WP Job Portal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.4.0 via the 'downloadCustomUploadedFile' function.Check if you run itEPSS 0.36%Dec 11, 2025
Sort