Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.Check if you run itEPSS 0.28%Oct 30, 2025
- High7.3A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.Check if you run itEPSS 0.30%Oct 30, 2025
- Medium6.4The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'blocksy_newsletter_subscribe' shortcode in all versions up to, and includiCheck if you run itEPSS 0.20%Oct 30, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Oct 30, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modelCheck if you run itEPSS 0.20%Oct 30, 2025
- Medium5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality.Check if you run itEPSS 0.22%Oct 30, 2025
- High7.5Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password.Check if you run itEPSS 0.31%Oct 30, 2025
- High7.5Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the admiCheck if you run itEPSS 0.33%Oct 30, 2025
- High8.2A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component.Check if you run itEPSS 0.52%Oct 30, 2025
- High7.5A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.Check if you run itEPSS 0.38%Oct 30, 2025
- High8.8An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter.Check if you run itEPSS 0.56%Oct 30, 2025
- High7.5sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -Check if you run itEPSS 1.09%Oct 30, 2025
- High7.5Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage vulnerability.Check if you run itEPSS 0.30%Oct 30, 2025
- High7.5AG Life Logger Android App version v1.0.2.72 and before (package name com.donki.healthy), developed by IO FIT, K.K., contains improper access control vulnerabilities.Check if you run itEPSS 0.30%Oct 30, 2025
- High7.5Kanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C., contains improper access control vulnerabilities.Check if you run itEPSS 0.30%Oct 30, 2025
- High7.5mCarFix Motorists App version 2.3 (package name com.skytop.mcarfix), developed by Paniel Mwaura, contains improper access control vulnerabilities.Check if you run itEPSS 0.31%Oct 30, 2025
- High7.5Senza: Keto & Fasting Android App version 2.10.15 (package name com.gl.senza), developed by Paul Itoi, contains an improper access control vulnerability.Check if you run itEPSS 0.34%Oct 30, 2025
- High7.5AdForest - Classified Android App version 4.0.12 (package name scriptsbundle.adforest), developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in itsCheck if you run itEPSS 0.34%Oct 30, 2025
- High7.5ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an improper access control vCheck if you run itEPSS 0.36%Oct 30, 2025
- High7.52nd Line Android App version v1.2.92 and before (package name com.mysecondline.app), developed by AutoBizLine, Inc., contains an improper access control vulnerability in its authenCheck if you run itEPSS 0.34%Oct 30, 2025
- High7.5TalkTalk 3.3.6 Android App contains improper access control vulnerabilities in multiple API endpoints.Check if you run itEPSS 0.30%Oct 30, 2025
- Medium6.1An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file.Check if you run itEPSS 0.28%Oct 30, 2025
- Medium6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).Check if you run itEPSS 0.26%Oct 30, 2025
- Medium6.5Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors.Check if you run itEPSS 0.28%Oct 30, 2025
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 (inclusive).Check if you run itEPSS 0.24%Oct 30, 2025
Sort