Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue was discovered in CPUID cpuz.sys 1.0.5.4.Check if you run itEPSS 0.31%Aug 5, 2025
- Critical9.8An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php componentCheck if you run itEPSS 1.11%Aug 5, 2025
- Critical9.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck functionCheck if you run itEPSS 1.11%Aug 5, 2025
- Medium6.5A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file upload functionality.Check if you run itEPSS 6.78%Aug 5, 2025
- Medium6.5An Authentication Bypass vulnerability in Blue Access' Cobalt X1 thru 02.000.187 allows an unauthorized attacker to log into the application as an administrator without valid credeCheck if you run itEPSS 0.32%Aug 5, 2025
- Critical9.8An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.Check if you run itEPSS 0.39%Aug 5, 2025
- Medium6.5A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitraryCheck if you run itEPSS 0.36%Aug 5, 2025
- Medium6.5An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN.Check if you run itEPSS 0.26%Aug 5, 2025
- High7.4An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via craftedCheck if you run itEPSS 6.85%Aug 5, 2025
- High7.4Jointelli 5G CPE 21H01 firmware JY_21H01_A3_v1.36 devices allow (blind) OS command injection.Check if you run itEPSS 1.05%Aug 5, 2025
- High7.5A vulnerability affecting the scanning module in Emsisoft Anti-Malware prior to 2024.12 allows attackers on a remote server to obtain Net-NTLMv2 hash information via a specially crCheck if you run itEPSS 0.43%Aug 5, 2025
- Low2.0A vulnerability classified as problematic was found in libtiff 4.6.0.Check if you run itEPSS 0.21%Aug 4, 2025
- Medium6.9A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7.Check if you run itEPSS 0.52%Aug 4, 2025
- Medium5.3A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0.Check if you run itEPSS 0.30%Aug 4, 2025
- Critical9.8An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network.Check if you run itEPSS 1.13%Aug 4, 2025
- High7.5An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.Check if you run itEPSS 0.50%Aug 4, 2025
- Medium6.9The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1 through 2024.Q1.19, 2024.Q2.0 through 2024.Q2.13, 2024.Q3.0Check if you run itEPSS 0.17%Aug 4, 2025
- Medium6.3A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4.Check if you run itEPSS 0.33%Aug 4, 2025
- Low1.0Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default is used.Check if you run itEPSS 0.16%Aug 4, 2025
- Medium5.3A vulnerability was found in Exrick xboot up to 3.3.4.Check if you run itEPSS 0.35%Aug 4, 2025
- Low2.0The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.QCheck if you run itEPSS 0.19%Aug 4, 2025
- Medium5.3A vulnerability was found in Exrick xboot up to 3.3.4.Check if you run itEPSS 0.36%Aug 4, 2025
- Medium6.9A vulnerability was found in Exrick xboot up to 3.3.4.Check if you run itEPSS 0.48%Aug 4, 2025
- Medium4.8A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic.Check if you run itEPSS 0.14%Aug 4, 2025
- Medium4.8A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic.Check if you run itEPSS 0.14%Aug 4, 2025
Sort