Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5.Check if you run itEPSS 0.33%Aug 4, 2025
- High7.5Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH.Check if you run itEPSS 0.40%Aug 4, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability inCheck if you run itEPSS 1.99%Aug 4, 2025
- High8.5ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks.Check if you run itEPSS 0.34%Aug 4, 2025
- Medium5.1A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5.Check if you run itEPSS 0.40%Aug 4, 2025
- Medium5.1A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5.Check if you run itEPSS 0.45%Aug 4, 2025
- Medium5.1A vulnerability was found in givanz Vvveb 1.0.5.Check if you run itEPSS 2.31%Aug 4, 2025
- High7.2Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability.Check if you run itEPSS 0.44%Aug 4, 2025
- Critical9.8Dell unity_operating_environment Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 66.55%Aug 4, 2025
- Medium6.1Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper NeutrCheck if you run itEPSS 0.27%Aug 4, 2025
- Medium5.0Grafana is an open-source platform for monitoring and observability.Check if you run itEPSS 0.34%Aug 4, 2025
- High7.5An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potenCheck if you run itEPSS 0.60%Aug 4, 2025
- High8.3A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys.Check if you run itEPSS 0.24%Aug 4, 2025
- Medium5.5CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.Check if you run itEPSS 0.13%Aug 4, 2025
- High8.8In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent.Check if you run itEPSS 8.33%Aug 4, 2025
- Medium6.9Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs.Check if you run itEPSS 0.33%Aug 4, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.67%Aug 4, 2025
- High8.0Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityPatch nowKEVEPSS 79.55%Aug 4, 2025
- Medium6.8In DA, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.13%Aug 4, 2025
- Medium4.7The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cCheck if you run itEPSS 0.42%Aug 4, 2025
- Medium6.4/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then publicly accessible unCheck if you run itEPSS 0.25%Aug 4, 2025
- Medium5.3tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structurCheck if you run itEPSS 0.36%Aug 4, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 9.14%Aug 4, 2025
- High7.7Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvrCheck if you run itEPSS 0.18%Aug 4, 2025
- High7.7Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup file and a renamed execCheck if you run itEPSS 0.16%Aug 4, 2025
Sort