Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in Frenify Mow mow allows Code Injection.This issue affects Mow: from n/a through <= 4.10.Check if you run itEPSS 0.17%Sep 9, 2025
- High7.2Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player fwduvp allows Server Side Request Forgery.This issue affects Ultimate Video Player: from n/a throCheck if you run itEPSS 0.25%Sep 9, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 7.0.1.Check if you run itEPSS 0.26%Sep 9, 2025
- High7.2K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are prot…Check if you run itEPSS 0.55%Sep 9, 2025
- Medium4.7A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an authenticated attackeCheck this weekEPSS 10.65%Sep 9, 2025
- High7.5Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function.Check if you run itEPSS 0.40%Sep 9, 2025
- Critical9.8Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function.Check if you run itEPSS 0.47%Sep 9, 2025
- High7.5Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function.Check if you run itEPSS 0.49%Sep 9, 2025
- High7.5Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function.Check if you run itEPSS 0.49%Sep 9, 2025
- Critical9.1halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url.Check if you run itEPSS 0.37%Sep 9, 2025
- Medium5.1Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending aCheck if you run itEPSS 0.36%Sep 8, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.Check if you run itEPSS 0.52%Sep 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testing F2FS with xfstests using UFS backed virtCheck if you run itEPSS 0.15%Sep 7, 2025
- Medium6.9Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks.Check if you run itEPSS 0.46%Sep 6, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number(0x80008000) that…Check if you run itEPSS 0.17%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ism_cmd() The s390x ISM device data sheet clearly states that only one rCheck if you run itEPSS 0.24%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If all the subrequests in an unbuffered write stream fail, the subreqCheck if you run itEPSS 0.23%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to invalid nodes damon_migrate_pages() tries migration even if theCheck if you run itEPSS 0.16%Sep 5, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront andCheck if you run itEPSS 0.19%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the requestCheck if you run itEPSS 0.15%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follows: BUG: KASAN: stack-out-of-bounCheck if you run itEPSS 0.19%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross Site Request Forgery.This issue affects Quick Paypal Payments:Check if you run itEPSS 0.13%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ericzane Floating Window Music Player floating-window-music-player allows Stored XSS.This issue affects Floating Window Music PlaCheck if you run itEPSS 0.12%Sep 5, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in usamafarooq Woocommerce Gifts Product woo-gift-product allows Cross Site Request Forgery.This issue affects Woocommerce Gifts ProCheck if you run itEPSS 0.15%Sep 5, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Simasicher SimaCookie simasicher-dsgvo-cookie allows Stored XSS.This issue affects SimaCookie: from n/a through <= 1.3.2.Check if you run itEPSS 0.11%Sep 5, 2025
Sort