Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.57-Zip is a file archiver with a high compression ratio.Check if you run itEPSS 0.71%Jul 17, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- High8.7The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database cCheck if you run itEPSS 0.45%Jul 17, 2025
- Critical9.1The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp_manga_delete_zip() function in all versions up toCheck if you run itEPSS 0.99%Jul 17, 2025
- Medium5.1A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.33%Jul 17, 2025
- Critical9.6GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included inCheck if you run itEPSS 0.49%Jul 17, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.38%Jul 17, 2025
- Critical9.8nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin.Check if you run itEPSS 0.38%Jul 17, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affectsPatch nowKEVEPSS 0.50%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- High8.6A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method.Check if you run itEPSS 1.48%Jul 16, 2025
- Critical9.3A stack-based buffer overflow exists in Achat v0.150 in its default configuration.Check if you run itEPSS 1.88%Jul 16, 2025
- High8.7A path traversal vulnerability exists in RIPS Scanner version 0.54.Check if you run itEPSS 2.47%Jul 16, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01.Check if you run itEPSS 4.34%Jul 16, 2025
- High8.4A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object spCheck if you run itEPSS 0.52%Jul 16, 2025
- High8.4A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file.Check if you run itEPSS 0.63%Jul 16, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2.Check if you run itEPSS 2.81%Jul 16, 2025
- High8.8A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831.Check if you run itEPSS 2.41%Jul 16, 2025
- High8.7A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS3000 builds, that allows unauthenticated remote attackers toCheck if you run itEPSS 2.35%Jul 16, 2025
- Critical9.3netis-systems netcore_router_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.77%Jul 16, 2025
- Medium6.9Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the confCheck if you run itEPSS 0.28%Jul 16, 2025
- High8.3RomM is a self-hosted rom manager and player.Check if you run itEPSS 0.54%Jul 16, 2025
- High7.3An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.Check if you run itEPSS 0.53%Jul 16, 2025
- High7.3An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.Check if you run itEPSS 0.54%Jul 16, 2025
- High7.5If a caching resolver is configured with , and with set to (the only allowable value other than ), and if the resolver, in the process of resolving a query, encounters a CNAME chaiCheck if you run itEPSS 1.02%Jul 16, 2025
Sort