Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Magento-lts is a long-term support alternative to Magento Community Edition (CE).Check if you run itEPSS 0.24%Nov 6, 2025
- Medium5.4IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection.Check if you run itEPSS 0.21%Nov 6, 2025
- High7.5Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2.Check if you run itEPSS 0.34%Nov 6, 2025
- High7.3runc is a CLI tool for spawning and running containers according to the OCI specification.Check if you run itEPSS 0.80%Nov 6, 2025
- High8.8Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability.Check if you run itEPSS 0.49%Nov 6, 2025
- Critical9.8oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability.Check if you run itEPSS 0.71%Nov 6, 2025
- Critical9.8oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability.Check if you run itEPSS 0.71%Nov 6, 2025
- High7.8evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability.Check if you run itEPSS 1.33%Nov 6, 2025
- High8.8Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability.Check this weekEPSS 16.95%Nov 6, 2025
- High8.4runc is a CLI tool for spawning and running containers according to the OCI specification.Check if you run itEPSS 0.81%Nov 6, 2025
- High8.8SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality.Check if you run itEPSS 0.39%Nov 6, 2025
- Critical9.3SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality.Check if you run itEPSS 0.69%Nov 6, 2025
- Critical9.3D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthentiCheck if you run itEPSS 4.01%Nov 6, 2025
- Critical9.3Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reCheck if you run itEPSS 0.67%Nov 6, 2025
- High8.8Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reCheck if you run itEPSS 0.53%Nov 6, 2025
- Critical9.3Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reCheck if you run itEPSS 0.73%Nov 6, 2025
- Critical9.3Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reCheck if you run itEPSS 0.67%Nov 6, 2025
- High8.8Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reCheck if you run itEPSS 0.49%Nov 6, 2025
- Medium5.1Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in NetworksController.addNetworkAction() that allows an authenticated low-privileged observerCheck if you run itEPSS 0.32%Nov 6, 2025
- Medium5.3Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxPrevalidationController.ajaxAction() that allows an authenticated low-privileged observCheck if you run itEPSS 0.31%Nov 6, 2025
- Medium5.3Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction() that allows an authenticated low-privilegedCheck if you run itEPSS 0.31%Nov 6, 2025
- Medium5.3Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxDeviceFwRulesAction() that allows an authenticated low-privilegedCheck if you run itEPSS 0.31%Nov 6, 2025
- Medium5.3Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxNetworkFwRulesAction() that allows an authenticated low-privilegeCheck if you run itEPSS 0.31%Nov 6, 2025
- High8.6Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction() that allows an authenticated low-privileged observer useCheck if you run itEPSS 0.31%Nov 6, 2025
- Medium5.3Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxDeviceController.ajaxDeviceAction() that allows an authenticated low-privileged observeCheck if you run itEPSS 0.31%Nov 6, 2025
Sort