Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability.Check if you run itEPSS 0.28%Aug 6, 2025
- High8.1A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface.Check this weekEPSS 14.67%Aug 6, 2025
- Medium6.5MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed.Check if you run itEPSS 0.27%Aug 6, 2025
- Medium6.5A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend templCheck if you run itEPSS 0.47%Aug 6, 2025
- Medium5.3An issue was discovered in 4C Strategies Exonaut 21.6.Check if you run itEPSS 0.35%Aug 6, 2025
- High7.5An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.Check if you run itEPSS 0.37%Aug 6, 2025
- Critical9.8An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.Check if you run itEPSS 0.47%Aug 6, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- High8.7onion-site-template is a complete, scalable tor hidden service self-hosting sample.Check if you run itEPSS 0.37%Aug 5, 2025
- Medium5.3Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication.Check if you run itEPSS 0.59%Aug 5, 2025
- High8.7Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects.Check if you run itEPSS 0.41%Aug 5, 2025
- Critical9.3Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects.Check if you run itEPSS 0.39%Aug 5, 2025
- Low2.7RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture.Check if you run itEPSS 0.41%Aug 5, 2025
- Medium6.0FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF.Check if you run itEPSS 0.33%Aug 5, 2025
- High8.7Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.40%Aug 5, 2025
- Critical9.1react-native-bottom-tabs is a library of Native Bottom Tabs for React Native.Check if you run itEPSS 0.52%Aug 5, 2025
- High8.7XWiki xwiki Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 1.45%Aug 5, 2025
- High7.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.48%Aug 5, 2025
- Medium6.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.69%Aug 5, 2025
- Medium4.8Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversation Messages Dashboard Page.Check if you run itEPSS 0.36%Aug 5, 2025
- Low2.0Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.Check if you run itEPSS 0.47%Aug 5, 2025
- High7.7RatPanel is a server operation and maintenance management panel.Check if you run itEPSS 0.69%Aug 5, 2025
- High7.1XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server.Check if you run itEPSS 1.38%Aug 5, 2025
- Critical10.0The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php.Check if you run itEPSS 1.86%Aug 5, 2025
- Critical10.0The WordPress plugin Advanced Custom Fields (ACF) version 3.5.1 and below contains a remote file inclusion (RFI) vulnerability in core/actions/export.php.Check if you run itEPSS 1.99%Aug 5, 2025
Sort