Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Powered BLUE Server versions 0.20130927 and prior contain a path traversal vulnerability.Check if you run itEPSS 0.35%Aug 8, 2025
- Medium4.6An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3.Check if you run itEPSS 0.22%Aug 8, 2025
- Medium5.0EnzoH has an OS command injection vulnerability.Check if you run itEPSS 0.29%Aug 8, 2025
- Medium5.7EnzoH has an OS command injection vulnerability.Check if you run itEPSS 0.34%Aug 8, 2025
- Medium4.5EnzoH has an OS command injection vulnerability.Check if you run itEPSS 0.31%Aug 8, 2025
- Low2.3A vulnerability was found in Antabot White-Jotter 0.22.Check if you run itEPSS 0.44%Aug 8, 2025
- Medium4.8A vulnerability was found in Huuge Box App 1.0.3 on Android.Check if you run itEPSS 0.25%Aug 8, 2025
- Medium5.3A vulnerability has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 and classified as critical.Check if you run itEPSS 0.38%Aug 8, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0.Check if you run itEPSS 0.38%Aug 8, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0.Check if you run itEPSS 0.38%Aug 8, 2025
- Critical9.1jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption (JWE) standard.Check if you run itEPSS 0.27%Aug 8, 2025
- High8.4skops is a Python library which helps users share and ship their scikit-learn based models.Check if you run itEPSS 0.24%Aug 8, 2025
- Medium5.5Astro is a web framework for content-driven websites.Check if you run itEPSS 0.70%Aug 8, 2025
- Medium5.3A vulnerability classified as critical was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0.Check if you run itEPSS 0.38%Aug 8, 2025
- Medium6.8uv is a Python package and project manager written in Rust.Check if you run itEPSS 0.22%Aug 8, 2025
- High8.4RARLAB WinRAR Path Traversal VulnerabilityPatch nowKEVEPSS 94.01%Aug 8, 2025
- High8.8A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection atCheck if you run itEPSS 0.65%Aug 8, 2025
- Critical9.8A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP2 (9.8.2.12) could allow an unauthenticated attacker to conduct a path traversal atCheck if you run itEPSS 0.56%Aug 8, 2025
- Medium4.8Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function.Check if you run itEPSS 0.25%Aug 8, 2025
- Medium6.3A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via injectiCheck if you run itEPSS 0.21%Aug 8, 2025
- Medium6.5OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check if you run itEPSS 0.33%Aug 8, 2025
- Medium6.5OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check if you run itEPSS 0.28%Aug 8, 2025
- High7.1OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check if you run itEPSS 0.36%Aug 8, 2025
- High7.1OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check if you run itEPSS 0.36%Aug 8, 2025
- High8.8The /users endpoint in Statamic Core before 2.11.8 allows XSS to add an administrator user.Check if you run itEPSS 0.29%Aug 8, 2025
Sort