Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.Check if you run itEPSS 0.25%Aug 27, 2025
- High8.8In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.Check if you run itEPSS 0.41%Aug 27, 2025
- Medium6.5The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI.Check if you run itEPSS 0.20%Aug 27, 2025
- Critical9.8Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that hCheck if you run itEPSS 0.61%Aug 27, 2025
- High7.0An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7.Check if you run itEPSS 0.27%Aug 27, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check this weekEPSS 10.93%Aug 27, 2025
- Medium5.6diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings interface.Check if you run itEPSS 0.24%Aug 27, 2025
- Medium5.6diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface.Check if you run itEPSS 0.24%Aug 27, 2025
- Medium5.3diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration form.Check if you run itEPSS 0.33%Aug 27, 2025
- High8.3SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787.Check if you run itEPSS 0.35%Aug 27, 2025
- High8.6NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories).Check this weekEPSS 10.61%Aug 27, 2025
- Medium6.1In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled.Check if you run itEPSS 0.28%Aug 27, 2025
- Medium6.1A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified in version 1.7.1, requiring authenticated admin access for exploitation.Check if you run itEPSS 0.28%Aug 27, 2025
- Critical9.8SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php.Check if you run itEPSS 0.45%Aug 27, 2025
- Critical9.8In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.Check if you run itEPSS 1.63%Aug 27, 2025
- High8.8O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.Check if you run itEPSS 0.52%Aug 27, 2025
- UnknownTiagorlampert CHAOS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.35%Aug 27, 2025
- Medium4.4The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7.97 due to insufficieCheck if you run itEPSS 0.19%Aug 26, 2025
- Medium4.0In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy.Check if you run itEPSS 0.33%Aug 26, 2025
- Medium4.0In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.8In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code.Check if you run itEPSS 0.17%Aug 26, 2025
- High8.8In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code.Check if you run itEPSS 0.17%Aug 26, 2025
- High8.4In multiple locations, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.4In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.09%Aug 26, 2025
- Critical9.8In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.40%Aug 26, 2025
Sort