Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module.Check if you run itEPSS 0.14%Jun 11, 2025
- Medium5.2A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with NXGPro+ controller manufactured between April 2020 to April 2025).Check if you run itEPSS 0.21%Jun 11, 2025
- High8.8The WordPress Automatic Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'core.php' file in all versions up to, aCheck if you run itEPSS 0.76%Jun 11, 2025
- High7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, aCheck if you run itEPSS 0.94%Jun 11, 2025
- Medium4.9The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10.Check if you run itEPSS 0.42%Jun 11, 2025
- Medium6.4The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sCheck if you run itEPSS 0.31%Jun 11, 2025
- Critical9.5Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key toCheck if you run itEPSS 0.34%Jun 11, 2025
- Critical9.5Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connectCheck if you run itEPSS 0.64%Jun 11, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check this weekEPSS 13.34%Jun 11, 2025
- High8.8Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.40%Jun 11, 2025
- High7.8A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating aCheck if you run itEPSS 0.48%Jun 11, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- UnknownZoho firewall_analyzer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 99.29%Jun 11, 2025
- High7.8The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which isCheck if you run itEPSS 0.14%Jun 10, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 0.24%Jun 10, 2025
- Medium5.5The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permCheck if you run itEPSS 0.21%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- Medium4.7In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs.Check if you run itEPSS 0.67%Jun 10, 2025
- Low2.3The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0.Check if you run itEPSS 0.82%Jun 10, 2025
- High8.1When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used toCheck if you run itEPSS 0.66%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and sCheck if you run itEPSS 0.59%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password ofCheck if you run itEPSS 0.59%Jun 10, 2025
- Medium6.9A vulnerability was found in code-projects School Fees Payment System 1.0 and classified as critical.Check if you run itEPSS 0.55%Jun 10, 2025
- Medium5.1A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic.Check if you run itEPSS 0.29%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
Sort