Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MCheck if you run itEPSS 0.91%Sep 9, 2025
- High8.5OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitraryCheck if you run itEPSS 0.80%Sep 9, 2025
- Medium5.1Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows admin access to the web interface.This issue affects GigaCenter ONT:Check if you run itEPSS 0.21%Sep 9, 2025
- High8.6DuckDB is an analytical in-process SQL database management system.Check if you run itEPSS 0.37%Sep 9, 2025
- High7.5Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.68%Sep 9, 2025
- High8.7Unauthenticated Telnet access vulnerability in Calix GigaCenter ONT allows root access.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.Check if you run itEPSS 0.35%Sep 9, 2025
- Critical9.1Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.82%Sep 9, 2025
- Medium5.1In pfSense CE /usr/local/www/status_traffic_totals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings beCheck this weekEPSS 14.48%Sep 9, 2025
- High7.0Excessive Privileges vulnerability in Calix GigaCenter ONT (Broadcom SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 81Check if you run itEPSS 0.24%Sep 9, 2025
- High8.6Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.64%Sep 9, 2025
- Medium5.3Copyparty is a portable file server.Check if you run itEPSS 0.38%Sep 9, 2025
- High7.0Excessive Privileges vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 8Check if you run itEPSS 0.21%Sep 9, 2025
- Medium5.1TinyEnv is an environment variable loader for PHP applications.Check if you run itEPSS 0.21%Sep 9, 2025
- Medium5.1TinyEnv is an environment variable loader for PHP applications.Check if you run itEPSS 0.19%Sep 9, 2025
- Medium5.3Saleor is an e-commerce platform.Check if you run itEPSS 0.31%Sep 9, 2025
- Medium4.1Open OnDemand is an open-source HPC portal.Check if you run itEPSS 0.27%Sep 9, 2025
- High8.6listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 0.14%Sep 9, 2025
- High7.5OctoPrint provides a web interface for controlling consumer 3D printers.Check this weekEPSS 22.14%Sep 9, 2025
- Medium4.3IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.18%Sep 9, 2025
- High7.1CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.51%Sep 9, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCRCheck if you run itEPSS 0.46%Sep 9, 2025
- Medium6.1CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Check if you run itEPSS 0.19%Sep 9, 2025
- Medium6.5CWE-328: Use of Weak HashCheck if you run itEPSS 0.25%Sep 9, 2025
- Medium6.9Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1Check if you run itEPSS 0.31%Sep 9, 2025
- Medium4.3CWE-200 Exposure of Sensitive Information to an Unauthorized ActorCheck if you run itEPSS 0.29%Sep 9, 2025
Sort