Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.8A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device.Check if you run itEPSS 0.45%Jun 4, 2025
- Medium5.3A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affCheck if you run itEPSS 0.19%Jun 4, 2025
- High8.8A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could alCheck if you run itEPSS 0.46%Jun 4, 2025
- High8.7A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed deviceCheck if you run itEPSS 0.43%Jun 4, 2025
- High8.9CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service.Check if you run itEPSS 0.73%Jun 4, 2025
- Medium6.7Local privilege escalation due to insecure file permissions.Check if you run itEPSS 0.13%Jun 4, 2025
- High7.5Denial of service due to improper handling of malformed input.Check if you run itEPSS 0.37%Jun 4, 2025
- Critical10.0Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571.Check if you run itEPSS 0.41%Jun 4, 2025
- Critical9.2Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046.Check if you run itEPSS 0.47%Jun 4, 2025
- High7.8Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture fileCheck if you run itEPSS 0.31%Jun 4, 2025
- Medium4.8A vulnerability was found in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.34%Jun 4, 2025
- High7.5An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic thatCheck if you run itEPSS 0.46%Jun 4, 2025
- Medium6.9A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.55%Jun 4, 2025
- Medium5.3A vulnerability was found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.53%Jun 4, 2025
- Medium6.9A vulnerability was found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.58%Jun 4, 2025
- Medium6.9A vulnerability was found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.58%Jun 4, 2025
- High7.3Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.43%Jun 4, 2025
- Medium6.9A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical.Check if you run itEPSS 0.83%Jun 4, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical.Check if you run itEPSS 0.79%Jun 4, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.64%Jun 4, 2025
- Medium4.8A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered.Check if you run itEPSS 0.30%Jun 4, 2025
- High8.8The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inCheck if you run itEPSS 0.56%Jun 4, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.61%Jun 4, 2025
- Medium4.3The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them viaCheck if you run itEPSS 0.16%Jun 4, 2025
- Critical9.8The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticateCheck if you run itEPSS 0.56%Jun 4, 2025
Sort