Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrarCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium5.1Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonateCheck if you run itEPSS 0.35%Oct 2, 2025
- High7.1Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the hostCheck if you run itEPSS 0.38%Oct 2, 2025
- High7.5Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTCheck if you run itEPSS 0.13%Oct 2, 2025
- Critical9.8The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticatCheck if you run itEPSS 0.44%Oct 2, 2025
- High7.1KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT STUDIO versions 8.53 and prior contain a use after free vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High8.4KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.4KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulneCheck if you run itEPSS 0.30%Oct 2, 2025
- Critical9.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path TraverCheck if you run itEPSS 0.28%Oct 2, 2025
- High7.1Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.ThiCheck if you run itEPSS 0.45%Oct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- None0.0Not usedOpen the advisoryOct 2, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.56%Oct 2, 2025
- Medium6.5PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.Check if you run itEPSS 0.26%Oct 2, 2025
- High7.5Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.40%Oct 2, 2025
- High7.5Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.49%Oct 2, 2025
Sort