Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Check if you run itEPSS 0.19%Jul 15, 2025
- High8.1Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.36%Jul 15, 2025
- Critical9.1Conjur provides secrets management and application identity for infrastructure.Check if you run itEPSS 1.45%Jul 15, 2025
- Medium5.5Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Check if you run itEPSS 0.31%Jul 15, 2025
- Medium5.5Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability.Check if you run itEPSS 0.14%Jul 15, 2025
- Medium6.4IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.20%Jul 15, 2025
- Medium5.6Apache CXF stores large stream based messages as temporary files on the local filesystem.Check if you run itEPSS 0.73%Jul 15, 2025
- High7.2There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.Check this weekEPSS 73.45%Jul 15, 2025
- High8.7A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll.Check if you run itEPSS 1.31%Jul 15, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in WePresent WiPG-1000 firmware versions prior to 2.2.3.0, due to improper input handling in the undocumented /cgi-bin/rdfCheck if you run itEPSS 5.86%Jul 15, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.Check if you run itEPSS 2.57%Jul 15, 2025
- High8.7An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the GET parameter in .Check if you run itEPSS 2.96%Jul 15, 2025
- Critical10.0An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances.Check if you run itEPSS 2.82%Jul 15, 2025
- Critical9.4An authenticated remote code execution vulnerability exists in Piwik (now Matomo) versions prior to 3.0.3 via the plugin upload mechanism.Check if you run itEPSS 1.91%Jul 15, 2025
- High8.4A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality.Check if you run itEPSS 0.45%Jul 15, 2025
- High8.5PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation.Check if you run itEPSS 0.40%Jul 15, 2025
- High8.7An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmd_str' parameter in the command_test.php endpoint.Check if you run itEPSS 3.45%Jul 15, 2025
- High8.7A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface.Check if you run itEPSS 1.94%Jul 15, 2025
- Critical10.0A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14.Check if you run itEPSS 1.67%Jul 15, 2025
- High8.6A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34.Check if you run itEPSS 1.49%Jul 15, 2025
- Critical9.3A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configurCheck if you run itEPSS 1.93%Jul 15, 2025
- High8.1The Restrict File Access plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.Check if you run itEPSS 0.30%Jul 15, 2025
- Medium5.5The Companion Auto Update plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘update_delay_days’ parameter in all versions up to, and including, 3.9.2 due toCheck if you run itEPSS 0.29%Jul 15, 2025
- Medium6.7Fortinet FortiOS Heap-based Buffer OverflowPatch nowKEVEPSS 0.24%Jul 15, 2025
- Low2.3The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS.Check if you run itEPSS 0.24%Jul 15, 2025
Sort