Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser.Check if you run itEPSS 0.41%Aug 20, 2025
- Critical9.3Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality.Check if you run itEPSS 3.76%Aug 20, 2025
- High8.6SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header.Check if you run itEPSS 1.20%Aug 20, 2025
- High8.7Solar FTP Server fails to properly handle format strings passed to the USER command.Check if you run itEPSS 1.08%Aug 20, 2025
- High8.7Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem.Check if you run itEPSS 1.80%Aug 20, 2025
- High8.7The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object.Check if you run itEPSS 1.64%Aug 20, 2025
- High8.7Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command.Check if you run itEPSS 1.48%Aug 20, 2025
- High8.4MJM QuickPlayer (also known as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file.Check if you run itEPSS 0.41%Aug 20, 2025
- High8.4MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files.Check if you run itEPSS 0.42%Aug 20, 2025
- High8.4Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files.Check if you run itEPSS 0.41%Aug 20, 2025
- Critical9.3LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser.Check if you run itEPSS 1.19%Aug 20, 2025
- High8.7Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake.Check if you run itEPSS 1.31%Aug 20, 2025
- Critical9.3FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface.Check if you run itEPSS 1.52%Aug 20, 2025
- High8.4Foxit PDF Reader < 4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on disk.Check if you run itEPSS 0.45%Aug 20, 2025
- High8.5FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server.Check if you run itEPSS 0.41%Aug 20, 2025
- Medium5.1A security vulnerability has been detected in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.30%Aug 20, 2025
- Medium5.1OnboardLite is the result of the Influx Initiative, our vision for an improved student organization lifecycle at the University of Central Florida.Check if you run itEPSS 0.32%Aug 20, 2025
- High8.4AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files.Check if you run itEPSS 0.58%Aug 20, 2025
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.34%Aug 20, 2025
- Medium6.3Frappe is a full-stack web application framework.Check if you run itEPSS 0.38%Aug 20, 2025
- Medium5.4IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.18%Aug 20, 2025
- Medium6.1IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.Check if you run itEPSS 0.11%Aug 20, 2025
- Medium6.5IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.50%Aug 20, 2025
- High7.1Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Check if you run itEPSS 0.17%Aug 20, 2025
- Medium4.9CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an authentiCheck if you run itEPSS 0.60%Aug 20, 2025
Sort