Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection vulnerability in the learn-msg.cgi script.Check if you run itEPSS 4.21%Aug 8, 2025
- Critical9.3EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script.Check if you run itEPSS 1.78%Aug 8, 2025
- Critical10.0Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism.Check if you run itEPSS 1.43%Aug 8, 2025
- Critical9.3CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script.Check if you run itEPSS 2.03%Aug 8, 2025
- Critical9.3An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6.Check if you run itEPSS 1.80%Aug 8, 2025
- Critical9.3A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface.Check if you run itEPSS 0.45%Aug 8, 2025
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryAug 8, 2025
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryAug 8, 2025
- Critical9.3Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device.Check if you run itEPSS 0.97%Aug 8, 2025
- Critical9.3By default, the Packet Power Monitoring and Control Web Interface do not enforce authentication mechanisms.Check if you run itEPSS 0.56%Aug 8, 2025
- High8.5A TLS vulnerability exists in the phone application used to manage a connected device.Check if you run itEPSS 0.13%Aug 8, 2025
- Critical9.2The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, which may allow an attacker to gain unauthorized access using bruCheck if you run itEPSS 0.39%Aug 8, 2025
- Medium6.9The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registered, or does not existCheck if you run itEPSS 0.33%Aug 8, 2025
- High8.6The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center (remote, cloud-connectedCheck if you run itEPSS 0.22%Aug 8, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.QCheck if you run itEPSS 0.64%Aug 8, 2025
- Critical9.8In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server.Check this weekEPSS 19.43%Aug 8, 2025
- High7.5In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities.Check if you run itEPSS 9.10%Aug 8, 2025
- Medium6.5IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information duCheck if you run itEPSS 0.29%Aug 8, 2025
- Critical9.3A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical.Check if you run itEPSS 3.74%Aug 8, 2025
- High7.1IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnCheck if you run itEPSS 0.22%Aug 8, 2025
- Medium5.3A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical.Check if you run itEPSS 0.81%Aug 8, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).Check if you run itEPSS 0.77%Aug 8, 2025
- Critical9.8If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities.Check if you run itEPSS 1.07%Aug 8, 2025
- Medium5.9The OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2.0 does not validate and escape some of its block options before ouCheck if you run itEPSS 0.20%Aug 8, 2025
- Medium5.3Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability.Check if you run itEPSS 0.82%Aug 8, 2025
Sort