Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.22%Jul 17, 2025
- High7.8A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.20%Jul 17, 2025
- High7.8A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.21%Jul 17, 2025
- High8.8A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.Check if you run itEPSS 0.12%Jul 17, 2025
- High8.8A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privilegesCheck if you run itEPSS 0.14%Jul 17, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.48%Jul 17, 2025
- High7.5A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer isCheck if you run itEPSS 0.14%Jul 17, 2025
- Medium5.57-Zip is a file archiver with a high compression ratio.Check if you run itEPSS 0.71%Jul 17, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- High8.7The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database cCheck if you run itEPSS 0.45%Jul 17, 2025
- Critical9.1The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp_manga_delete_zip() function in all versions up toCheck if you run itEPSS 0.99%Jul 17, 2025
- Medium5.1A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.33%Jul 17, 2025
- Critical9.6GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included inCheck if you run itEPSS 0.49%Jul 17, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.38%Jul 17, 2025
- Critical9.8nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin.Check if you run itEPSS 0.38%Jul 17, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affectsPatch nowKEVEPSS 0.50%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- High8.6A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method.Check if you run itEPSS 1.48%Jul 16, 2025
- Critical9.3A stack-based buffer overflow exists in Achat v0.150 in its default configuration.Check if you run itEPSS 1.88%Jul 16, 2025
- High8.7A path traversal vulnerability exists in RIPS Scanner version 0.54.Check if you run itEPSS 2.47%Jul 16, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01.Check if you run itEPSS 4.34%Jul 16, 2025
- High8.4A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object spCheck if you run itEPSS 0.52%Jul 16, 2025
- High8.4A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file.Check if you run itEPSS 0.63%Jul 16, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2.Check if you run itEPSS 2.81%Jul 16, 2025
- High8.8A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831.Check if you run itEPSS 2.41%Jul 16, 2025
Sort