Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownPalo Alto Networks Expedition Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.42%Jun 25, 2025
- Medium5.7An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components.Check if you run itEPSS 0.93%Jun 25, 2025
- Unknownvendure vendure Improper Input ValidationPatch nowKEVEPSS 60.42%Jun 25, 2025
- High7.1SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $Check if you run itEPSS 0.32%Jun 25, 2025
- UnknownSolarWinds security_event_manager Deserialization of Untrusted DataPatch nowKEVEPSS 92.25%Jun 25, 2025
- High7.1A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injecteCheck if you run itEPSS 0.32%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.46%Jun 24, 2025
- Medium5.3A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.46%Jun 24, 2025
- Medium6.9A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.55%Jun 24, 2025
- Low1.7RISC Zero is a zero-knowledge verifiable general computing platform, with Ethereum integration.Check if you run itEPSS 0.41%Jun 24, 2025
- Medium5.3Meshtastic-Android is an Android application for the mesh radio software Meshtastic.Check if you run itEPSS 0.26%Jun 24, 2025
- Critical9.7Hikka is a Telegram userbot.Check if you run itEPSS 0.32%Jun 24, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck if you run itEPSS 0.23%Jun 24, 2025
- Medium5.4Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page.Check if you run itEPSS 0.21%Jun 24, 2025
- Medium5.4Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.21%Jun 24, 2025
- Medium5.0NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole.Check if you run itEPSS 0.23%Jun 24, 2025
- Critical10.0Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, AuthenticCheck if you run itEPSS 0.32%Jun 24, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.46%Jun 24, 2025
- Critical9.3Improper Restriction of Excessive Authentication Attempts vulnerability in Art-in Bilişim Teknolojileri ve Yazılım Hizm.Check if you run itEPSS 0.38%Jun 24, 2025
- Medium5.4A flaw was found in the libssh library in versions less than 0.11.2.Check if you run itEPSS 1.89%Jun 24, 2025
- High8.3A flaw was found in Podman.Check if you run itEPSS 0.52%Jun 24, 2025
- High8.7A vulnerability was found in Netgear WNCE3001 1.0.0.50.Check if you run itEPSS 0.91%Jun 24, 2025
- High8.1Memory safety bugs present in Firefox 139 and Thunderbird 139.Check if you run itEPSS 4.26%Jun 24, 2025
- High8.1If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the file extension.Check if you run itEPSS 0.46%Jun 24, 2025
- Medium4.3The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user intoCheck if you run itEPSS 0.28%Jun 24, 2025
Sort