Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7An issue was discovered in the COROS application through 3.8.12 for Android.Check if you run itEPSS 0.16%Jun 20, 2025
- Critical9.3minidvblinux minidvblinux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.55%Jun 20, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- Critical9.3SugarCRM sugarcrm Deserialization of Untrusted DataPatch nowKEVEPSS 4.96%Jun 20, 2025
- Critical9.1IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to executCheck if you run itEPSS 0.55%Jun 19, 2025
- High7.1IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.Check if you run itEPSS 0.48%Jun 19, 2025
- Medium6.2IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.Check if you run itEPSS 0.17%Jun 19, 2025
- UnknownCVE-2006-2192Open the advisoryJun 19, 2025
- Critical9.5Meshtastic is an open source mesh networking solution.Check if you run itEPSS 0.60%Jun 19, 2025
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.39%Jun 19, 2025
- Medium4.8Hydra is a layer-two scalability solution for Cardano.Check if you run itEPSS 0.31%Jun 19, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL Injection.Check if you run itEPSS 0.38%Jun 19, 2025
- High7.0GNU grub2 Execution with Unnecessary PrivilegesPatch nowKEVEPSS 0.48%Jun 19, 2025
- UnknownCVE-2005-2347Open the advisoryJun 19, 2025
- Medium6.4The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4 due to insufficientCheck if you run itEPSS 0.25%Jun 19, 2025
- UnknownCVE-2016-3399Open the advisoryJun 19, 2025
- Medium6.4The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Builder feature in all versions up to, and includingCheck if you run itEPSS 0.20%Jun 19, 2025
- Medium5.4The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient capability check on thCheck if you run itEPSS 0.30%Jun 19, 2025
- High8.3WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.49%Jun 19, 2025
- Medium6.4The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in allCheck if you run itEPSS 0.25%Jun 19, 2025
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 4.74%Jun 19, 2025
- Critical9.1pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications.Check if you run itEPSS 0.40%Jun 19, 2025
- Medium6.5OpenList Frontend is a UI component for OpenList.Check if you run itEPSS 0.32%Jun 19, 2025
- Unknownpterodactyl panel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 54.46%Jun 19, 2025
- Critical9.8The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most with sudo access) thCheck if you run itEPSS 0.47%Jun 18, 2025
Sort