Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7RatPanel is a server operation and maintenance management panel.Check if you run itEPSS 0.69%Aug 5, 2025
- High7.1XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server.Check if you run itEPSS 1.38%Aug 5, 2025
- Critical10.0The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php.Check if you run itEPSS 1.86%Aug 5, 2025
- Critical10.0The WordPress plugin Advanced Custom Fields (ACF) version 3.5.1 and below contains a remote file inclusion (RFI) vulnerability in core/actions/export.php.Check if you run itEPSS 1.99%Aug 5, 2025
- Critical10.0Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command.Check if you run itEPSS 1.59%Aug 5, 2025
- Critical10.0PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sanitization.Check if you run itEPSS 2.26%Aug 5, 2025
- High8.6Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via craCheck if you run itEPSS 1.52%Aug 5, 2025
- Critical9.3Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow.Check if you run itEPSS 1.85%Aug 5, 2025
- High8.6Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in .Check if you run itEPSS 3.61%Aug 5, 2025
- High8.7Maxthon3 version 3.2.2 build 1000 and prior are vulnerable to cross context scripting (XCS) via the about:history page.Check if you run itEPSS 1.42%Aug 5, 2025
- Critical10.0An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3.Check if you run itEPSS 1.80%Aug 5, 2025
- Critical9.4Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability.Check if you run itEPSS 1.60%Aug 5, 2025
- Medium6.9A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0.Check if you run itEPSS 2.73%Aug 5, 2025
- Critical9.3FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories.Check if you run itEPSS 2.41%Aug 5, 2025
- Critical10.0The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in commanCheck this weekEPSS 16.54%Aug 5, 2025
- High8.7ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter.Check if you run itEPSS 2.10%Aug 5, 2025
- High8.6BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files.Check if you run itEPSS 1.32%Aug 5, 2025
- Critical9.3A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01.Check if you run itEPSS 1.63%Aug 5, 2025
- Critical9.3An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.Check if you run itEPSS 1.46%Aug 5, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in libav up to 12.3.Check if you run itEPSS 0.25%Aug 5, 2025
- Medium4.8A vulnerability, which was classified as critical, has been found in libav up to 12.3.Check if you run itEPSS 0.24%Aug 5, 2025
- High7.1Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service (DoS) due to negatCheck if you run itEPSS 0.30%Aug 5, 2025
- Medium4.8A vulnerability classified as problematic was found in libav up to 12.3.Check if you run itEPSS 0.23%Aug 5, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.30%Aug 5, 2025
- Medium6.1IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to no validation of URIs.Check if you run itEPSS 0.20%Aug 5, 2025
Sort