Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- Medium5.4SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.Check if you run itEPSS 0.19%Sep 19, 2025
- Critical9.8The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplus_import_pack_iCheck if you run itEPSS 0.78%Sep 19, 2025
- High7.2There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW .Check if you run itEPSS 0.31%Sep 19, 2025
- High7.2There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F .Check if you run itEPSS 0.32%Sep 19, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.96%Sep 19, 2025
- Medium6.5Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation.Check if you run itEPSS 0.24%Sep 19, 2025
- Medium6.1Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.Check if you run itEPSS 0.27%Sep 19, 2025
- High8.8Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.Check if you run itEPSS 0.61%Sep 19, 2025
- High8.0An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.Check if you run itEPSS 0.33%Sep 19, 2025
- High8.8Hardcoded credentials in default configuration of PPress 0.0.9.Check if you run itEPSS 0.42%Sep 19, 2025
- Low3.7PureVPN client applications on Linux through September 2025 mishandle firewalling.Check if you run itEPSS 0.21%Sep 18, 2025
- Low3.7PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume.Check if you run itEPSS 0.22%Sep 18, 2025
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locallyCheck if you run itEPSS 0.25%Sep 18, 2025
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locaCheck if you run itEPSS 0.25%Sep 18, 2025
- High7.0Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Sep 18, 2025
- Medium6.9A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data.Check if you run itEPSS 0.11%Sep 18, 2025
- High8.6An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials.Check if you run itEPSS 0.14%Sep 18, 2025
- High8.6An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software.Check if you run itEPSS 0.24%Sep 18, 2025
- Critical9.3Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means.Check if you run itEPSS 0.45%Sep 18, 2025
- Critical9.3The secret used for validating authentication tokens is hardcoded in device firmware for affected versions.Check if you run itEPSS 0.76%Sep 18, 2025
- High7.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.35%Sep 18, 2025
Sort