Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.Check if you run itEPSS 0.26%Jul 21, 2025
- High7.8INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.26%Jul 21, 2025
- High7.8INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability.Check if you run itEPSS 0.26%Jul 21, 2025
- High7.8INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.24%Jul 21, 2025
- High7.8INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.24%Jul 21, 2025
- High7.8INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.24%Jul 21, 2025
- High7.8INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.24%Jul 21, 2025
- High7.8Luxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.29%Jul 21, 2025
- High7.5Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.Check if you run itEPSS 0.41%Jul 21, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Real-time SEO for Drupal allows Cross-Site Scripting (XSS).This issue aCheck if you run itEPSS 0.27%Jul 21, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS).This issue affects BCheck if you run itEPSS 0.26%Jul 21, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Cookies Addons allows Cross-Site Scripting (XSS).This issue affects CooCheck if you run itEPSS 0.27%Jul 21, 2025
- Critical9.8Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 bCheck if you run itEPSS 0.53%Jul 21, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical.Check if you run itEPSS 0.53%Jul 21, 2025
- Medium6.8A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code executiCheck this weekEPSS 12.26%Jul 21, 2025
- High8.1A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment toCheck if you run itEPSS 9.07%Jul 21, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- High8.8A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High AvaiCheck if you run itEPSS 4.86%Jul 21, 2025
- Critical9.8An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantiningCheck this weekEPSS 10.51%Jul 21, 2025
- Critical9.8An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code executionCheck this weekEPSS 11.77%Jul 21, 2025
- High7.5An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries.Check if you run itEPSS 0.27%Jul 21, 2025
- Medium5.9Incorrect authentication vulnerability in ParkingDoor.Check if you run itEPSS 0.21%Jul 21, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.57%Jul 21, 2025
- Medium5.1A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- Medium5.5Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.Check if you run itEPSS 0.10%Jul 21, 2025
Sort