Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702.Check if you run itEPSS 0.71%May 21, 2025
- Medium4.8A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0.Check if you run itEPSS 0.44%May 21, 2025
- High8.6The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.37%May 21, 2025
- Medium6.1The ns_backup extension through 13.0.0 for TYPO3 allows XSS.Check if you run itEPSS 0.24%May 21, 2025
- High8.6The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.37%May 21, 2025
- Medium6.8The ns_backup extension through 13.0.0 for TYPO3 allows command injection.Check if you run itEPSS 0.77%May 21, 2025
- Medium6.4The cs_seo extension through 9.2.0 for TYPO3 allows XSS.Check if you run itEPSS 0.25%May 21, 2025
- Medium5.3The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.30%May 21, 2025
- High8.6The ns_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location.Check if you run itEPSS 0.37%May 21, 2025
- Critical10.0The sr_feuser_register extension through 12.4.8 for TYPO3 allows Remote Code Execution.Check if you run itEPSS 0.86%May 21, 2025
- High8.1Blog Designer PRO for WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 0.58%May 21, 2025
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature.Check if you run itEPSS 0.31%May 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32.Check if you run itEPSS 0.26%May 21, 2025
- High7.2A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the MoCheck if you run itEPSS 0.47%May 21, 2025
- High7.2A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager.Check if you run itEPSS 0.59%May 21, 2025
- Medium6.5FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function.Check if you run itEPSS 0.30%May 21, 2025
- Medium6.5FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function.Check if you run itEPSS 0.30%May 21, 2025
- Critical9.8An issue in D-Link DI-8100 16.07.26A1 allows a remote attacker to bypass administrator login authenticationCheck if you run itEPSS 0.85%May 21, 2025
- High7.2An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via UserService.php and the checkForOldHash function.Check if you run itEPSS 0.46%May 21, 2025
- High8.4An issue in Valvesoftware Steam Client Steam Client 1738026274 allows attackers to escalate privileges via a crafted executable or DLL.Check if you run itEPSS 0.22%May 21, 2025
- High8.4An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.Check if you run itEPSS 0.18%May 21, 2025
- Critical9.1IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.5Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu.Check if you run itEPSS 0.43%May 21, 2025
- Medium6.1Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code.Check if you run itEPSS 0.41%May 21, 2025
- High7.7itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to the database.Check if you run itEPSS 0.16%May 21, 2025
Sort