Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction,Check if you run itEPSS 4.32%Sep 23, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in TalentSys Consulting Information Technology Industry Inc.Check if you run itEPSS 1.02%Sep 23, 2025
- High7.3Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518Check if you run itEPSS 0.36%Sep 23, 2025
- Critical9.3Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: PCheck if you run itEPSS 0.55%Sep 23, 2025
- High8.6No password for the root user is set in Novakon P series.Check if you run itEPSS 0.22%Sep 23, 2025
- Critical9.4A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions.Check if you run itEPSS 0.22%Sep 23, 2025
- Critical10.0A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.Check if you run itEPSS 1.11%Sep 23, 2025
- Medium6.5An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator.Check if you run itEPSS 0.33%Sep 23, 2025
- Medium5.3danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks.Check if you run itEPSS 0.28%Sep 23, 2025
- Critical9.8The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type vCheck if you run itEPSS 0.61%Sep 23, 2025
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc.Check if you run itEPSS 0.29%Sep 23, 2025
- High8.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad Software Inc.Check if you run itEPSS 0.28%Sep 23, 2025
- Medium6.9A security flaw has been discovered in Campcodes Point of Sale System POS 1.0.Check if you run itEPSS 0.50%Sep 23, 2025
- Critical9.8The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versioCheck if you run itEPSS 0.94%Sep 23, 2025
- Medium6.9A security flaw has been discovered in Campcodes Gym Management System 1.0.Check if you run itEPSS 0.48%Sep 23, 2025
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc.Check if you run itEPSS 1.11%Sep 23, 2025
- Medium5.3A vulnerability was identified in Campcodes Society Membership Information System 1.0.Check if you run itEPSS 0.39%Sep 23, 2025
- Medium5.3A vulnerability was determined in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.44%Sep 23, 2025
- Medium5.3A vulnerability was found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.44%Sep 23, 2025
- Medium6.9A flaw has been found in Reservation Online Hotel Reservation System 1.0.Check if you run itEPSS 0.42%Sep 23, 2025
- Medium6.9A vulnerability was detected in code-projects Online Bidding System 1.0.Check if you run itEPSS 0.48%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() A crash was observed with the following output: BUG: kCheck if you run itEPSS 0.13%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() Currently, calling bpf_map_kmalloc_node() fCheck if you run itEPSS 0.15%Sep 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive semaphoreCheck if you run itEPSS 0.12%Sep 23, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by inodes xarray race There is a race condition between inode evictiCheck if you run itEPSS 0.11%Sep 23, 2025
Sort