Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.Check if you run itEPSS 0.48%Aug 4, 2025
- High8.4CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks.Check if you run itEPSS 0.11%Aug 4, 2025
- Critical9.8Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.Check if you run itEPSS 0.56%Aug 4, 2025
- Critical9.1Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.Check if you run itEPSS 0.46%Aug 4, 2025
- High8.1A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a craCheck if you run itEPSS 0.41%Aug 4, 2025
- Critical9.8The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses.Check if you run itEPSS 0.61%Aug 4, 2025
- Critical9.6Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality.Check if you run itEPSS 0.62%Aug 4, 2025
- Medium6.5An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file.Check if you run itEPSS 0.35%Aug 4, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 4, 2025
- Medium6.5An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the utility.Check if you run itEPSS 0.43%Aug 4, 2025
- Low3.8LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.Check if you run itEPSS 0.52%Aug 4, 2025
- Critical9.9LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript featCheck if you run itEPSS 0.60%Aug 4, 2025
- Critical9.0RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.Check if you run itEPSS 0.74%Aug 4, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400.Check if you run itEPSS 0.23%Aug 4, 2025
- UnknownCVE-2023-5561 is named in a Cloudflare managed-rules release.Check if you run itEPSS 4.33%Aug 4, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android.Check if you run itEPSS 0.14%Aug 3, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android.Check if you run itEPSS 0.14%Aug 3, 2025
- Medium5.1A vulnerability was found in Portabilis i-Diario 1.5.0.Check if you run itEPSS 0.30%Aug 3, 2025
- Medium5.1A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10.Check if you run itEPSS 0.32%Aug 3, 2025
- Medium5.1A vulnerability was found in Portabilis i-Educar 2.9.Check if you run itEPSS 0.33%Aug 3, 2025
- Medium5.1A vulnerability was found in Portabilis i-Educar 2.9.Check if you run itEPSS 0.40%Aug 3, 2025
- High7.5Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin.Check if you run itEPSS 0.28%Aug 3, 2025
- Medium6.1Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin.Check if you run itEPSS 0.68%Aug 3, 2025
- Medium5.1A vulnerability was found in Portabilis i-Educar 2.9.Check if you run itEPSS 0.33%Aug 3, 2025
- High7.5Improper Input Validation vulnerability in Apache Zeppelin.Check if you run itEPSS 1.05%Aug 3, 2025
Sort