Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in the context of a victim's browser via iCheck if you run itEPSS 0.27%Aug 6, 2025
- Medium5.3In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collectCheck if you run itEPSS 0.38%Aug 6, 2025
- Medium6.5In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session managCheck if you run itEPSS 0.41%Aug 6, 2025
- High7.5Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter WCheck if you run itEPSS 0.41%Aug 6, 2025
- Medium6.1AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability.Check if you run itEPSS 0.28%Aug 6, 2025
- High8.1A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface.Check this weekEPSS 14.67%Aug 6, 2025
- Medium6.5MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed.Check if you run itEPSS 0.27%Aug 6, 2025
- Medium6.5A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend templCheck if you run itEPSS 0.47%Aug 6, 2025
- Medium5.3An issue was discovered in 4C Strategies Exonaut 21.6.Check if you run itEPSS 0.35%Aug 6, 2025
- High7.5An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.Check if you run itEPSS 0.37%Aug 6, 2025
- Critical9.8An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.Check if you run itEPSS 0.47%Aug 6, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- High8.7onion-site-template is a complete, scalable tor hidden service self-hosting sample.Check if you run itEPSS 0.37%Aug 5, 2025
- Medium5.3Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication.Check if you run itEPSS 0.59%Aug 5, 2025
- High8.7Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects.Check if you run itEPSS 0.41%Aug 5, 2025
- Critical9.3Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects.Check if you run itEPSS 0.39%Aug 5, 2025
- Low2.7RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture.Check if you run itEPSS 0.41%Aug 5, 2025
- Medium6.0FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF.Check if you run itEPSS 0.33%Aug 5, 2025
- High8.7Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.40%Aug 5, 2025
- Critical9.1react-native-bottom-tabs is a library of Native Bottom Tabs for React Native.Check if you run itEPSS 0.52%Aug 5, 2025
- High8.7XWiki xwiki Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 1.45%Aug 5, 2025
- High7.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.48%Aug 5, 2025
- Medium6.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.69%Aug 5, 2025
- Medium4.8Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversation Messages Dashboard Page.Check if you run itEPSS 0.36%Aug 5, 2025
- Low2.0Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.Check if you run itEPSS 0.47%Aug 5, 2025
Sort