Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injectingCheck if you run itEPSS 0.97%Jul 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injectinCheck if you run itEPSS 0.97%Jul 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crCheck if you run itEPSS 1.00%Jul 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the TelegCheck if you run itEPSS 1.02%Jul 21, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 21, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 47.46%Jul 21, 2025
- Critical9.8An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions and pass a client hostname directly to snprintf as the formatCheck if you run itEPSS 1.33%Jul 21, 2025
- Medium5.3An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials forCheck if you run itEPSS 0.55%Jul 21, 2025
- High8.8An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attackerCheck if you run itEPSS 0.54%Jul 21, 2025
- Critical9.8In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions.Check if you run itEPSS 1.17%Jul 21, 2025
- Critical9.8In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file.Check if you run itEPSS 1.20%Jul 21, 2025
- High7.5In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files.Check if you run itEPSS 0.65%Jul 21, 2025
- High7.5In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file.Check if you run itEPSS 0.61%Jul 21, 2025
- High7.5In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive.Check if you run itEPSS 0.27%Jul 21, 2025
- Medium4.3The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crCheck if you run itEPSS 0.17%Jul 21, 2025
- Medium4.3The com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed application (with no permissions) to place phone calls without user interaction byCheck if you run itEPSS 0.22%Jul 21, 2025
- Medium6.5Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.Check if you run itEPSS 0.43%Jul 21, 2025
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.08%Jul 21, 2025
- Medium6.1Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xCheck if you run itEPSS 0.84%Jul 21, 2025
- Unknownlkw199711 smanga Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 21, 2025
- Unknownbyzoro smart_s85f_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.33%Jul 21, 2025
- Unknowntongda2000 tongda_office_anywhere Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.70%Jul 21, 2025
- Unknownprestashop poststaticfooter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 32.41%Jul 21, 2025
- Unknownguralp man-eam-0003 Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 9.80%Jul 21, 2025
- Unknownopmc woocommerce_dropshipping Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.03%Jul 21, 2025
Sort