Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbCheck if you run itEPSS 0.35%Sep 3, 2025
- Medium4.6One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipCheck if you run itEPSS 1.38%Sep 3, 2025
- Medium5.3An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface.Check if you run itEPSS 1.72%Sep 3, 2025
- Medium5.3SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the.Check if you run itEPSS 0.35%Sep 3, 2025
- Medium5.3LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or commCheck if you run itEPSS 0.33%Sep 3, 2025
- Medium6.1Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads.Check if you run itEPSS 0.27%Sep 3, 2025
- High7.5Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.Check if you run itEPSS 0.40%Sep 3, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- High7.6In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name.Check if you run itEPSS 0.39%Sep 3, 2025
- High7.5Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.Check if you run itEPSS 0.47%Sep 2, 2025
- Medium6.9A vulnerability was determined in itsourcecode Student Information Management System 1.0.Check if you run itEPSS 0.42%Sep 2, 2025
- Medium5.3A vulnerability was found in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.30%Sep 2, 2025
- Medium6.9A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0.Check if you run itEPSS 0.45%Sep 2, 2025
- Medium6.9A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 2, 2025
- High7.8Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.18%Sep 2, 2025
- Low3.3Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.Check if you run itEPSS 0.24%Sep 2, 2025
- Low3.3Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.Check if you run itEPSS 0.24%Sep 2, 2025
- Low3.3Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.Check if you run itEPSS 0.24%Sep 2, 2025
- High7.8Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.Check if you run itEPSS 0.26%Sep 2, 2025
- High7.2Vacron Camera ping Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.22%Sep 2, 2025
- High8.8ATEN eco DC Missing Authorization Privilege Escalation Vulnerability.Check if you run itEPSS 0.56%Sep 2, 2025
- High7.8Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability.Check if you run itEPSS 0.21%Sep 2, 2025
- High7.8Anritsu ShockLine CHX File Parsing Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 0.49%Sep 2, 2025
- High7.8NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.27%Sep 2, 2025
- High7.5rocket.chat Incorrect Authorization Information Disclosure Vulnerability.Check if you run itEPSS 0.41%Sep 2, 2025
Sort