Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interfacCheck if you run itEPSS 0.62%Jun 9, 2025
- Medium5.4Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module.Check if you run itEPSS 0.31%Jun 9, 2025
- Medium5.4Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.Check if you run itEPSS 0.24%Jun 9, 2025
- High7.5react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary.Check if you run itEPSS 0.19%Jun 9, 2025
- Medium6.8An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication ModuleCheck if you run itEPSS 0.29%Jun 9, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 31.21%Jun 9, 2025
- UnknownCVE-2024-46986 is named in a Cloudflare managed-rules release.Check this weekEPSS 37.11%Jun 9, 2025
- Medium6.1A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious siteCheck if you run itEPSS 0.31%Jun 9, 2025
- Unknownkanev cab_fare_calculator Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.06%Jun 9, 2025
- Unknowncircontrol circarlife_scada Improper AuthenticationPatch nowKEVEPSS 24.57%Jun 9, 2025
- High8.7A vulnerability was found in Tenda AC15 15.03.05.19_multi.Check if you run itEPSS 0.98%Jun 8, 2025
- High8.7A vulnerability was found in Tenda AC15 15.03.05.19_multi.Check if you run itEPSS 6.40%Jun 8, 2025
- High8.7A vulnerability was found in Tenda AC15 15.03.05.19_multi.Check if you run itEPSS 0.98%Jun 8, 2025
- High8.7A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical.Check if you run itEPSS 0.98%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to prCheck if you run itEPSS 1.03%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to priCheck if you run itEPSS 1.03%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privCheck if you run itEPSS 1.03%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privCheck if you run itEPSS 1.01%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to pCheck if you run itEPSS 1.03%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to priviCheck if you run itEPSS 1.03%Jun 8, 2025
- High7.1Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilCheck if you run itEPSS 1.01%Jun 8, 2025
- High7.7The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection.Check if you run itEPSS 0.61%Jun 8, 2025
- High7.7The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection.Check if you run itEPSS 0.62%Jun 8, 2025
- High7.7The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection.Check if you run itEPSS 0.62%Jun 8, 2025
- High7.7The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection.Check if you run itEPSS 0.61%Jun 8, 2025
Sort