Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 2.14%Aug 13, 2025
- Medium5.3A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4.Check if you run itEPSS 0.35%Aug 13, 2025
- High7.3A vulnerability was found in H3C M2 NAS V100R006.Check if you run itEPSS 0.17%Aug 13, 2025
- High7.5Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack.Check if you run itEPSS 3.69%Aug 13, 2025
- Medium6.3Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.46%Aug 13, 2025
- Medium5.3Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codCheck if you run itEPSS 0.35%Aug 13, 2025
- Medium5.3Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codCheck if you run itEPSS 0.35%Aug 13, 2025
- High7.1Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path TraversalCheck if you run itEPSS 0.65%Aug 13, 2025
- High8.8Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinCheck if you run itEPSS 0.84%Aug 13, 2025
- Critical9.8The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserializationCheck if you run itEPSS 1.30%Aug 13, 2025
- Medium6.5Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions.Check if you run itEPSS 1.00%Aug 13, 2025
- Medium6.5Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-Check if you run itEPSS 0.25%Aug 13, 2025
- High7.5A buffer overflow vulnerability exists in the module SetupUtility.Check if you run itEPSS 0.13%Aug 13, 2025
- High7.5Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.Check if you run itEPSS 0.14%Aug 13, 2025
- High7.5UsbCoreDxe has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.Check if you run itEPSS 0.14%Aug 13, 2025
- Critical9.4N-able N-Central Command Injection VulnerabilityPatch nowKEVEPSS 4.13%Aug 13, 2025
- Critical9.4N-able N-Central Insecure Deserialization VulnerabilityPatch nowKEVEPSS 2.51%Aug 13, 2025
- Critical9.8LatePoint WordPress Plugin Layout Parameter VulnerabilityPatch nowKEVEPSS 0.57%Aug 13, 2025
- Medium5.4CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON fileCheck if you run itEPSS 0.26%Aug 13, 2025
- Critical9.8An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the child_process moduleCheck if you run itEPSS 1.06%Aug 13, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafteCheck if you run itEPSS 0.40%Aug 13, 2025
- Critical9.8In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.Check if you run itEPSS 0.39%Aug 13, 2025
- Medium6.5OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.Check if you run itEPSS 1.30%Aug 13, 2025
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in SpatialReference.org (OSGeo/spatialreference.org) versions prior to 2025-05-17 (commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491Check if you run itEPSS 0.23%Aug 13, 2025
- High7.5A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445.Check if you run itEPSS 0.40%Aug 13, 2025
Sort