Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted containeCheck if you run itEPSS 0.90%Jul 17, 2025
- High7.8A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.23%Jul 17, 2025
- Medium6.9A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical.Check if you run itEPSS 0.49%Jul 17, 2025
- High7.8A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.22%Jul 17, 2025
- High7.8A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.22%Jul 17, 2025
- High7.8A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.20%Jul 17, 2025
- High7.8A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.21%Jul 17, 2025
- High8.8A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.Check if you run itEPSS 0.12%Jul 17, 2025
- High8.8A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privilegesCheck if you run itEPSS 0.14%Jul 17, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.48%Jul 17, 2025
- High7.5A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer isCheck if you run itEPSS 0.14%Jul 17, 2025
- Medium5.57-Zip is a file archiver with a high compression ratio.Check if you run itEPSS 0.71%Jul 17, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- High8.7The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database cCheck if you run itEPSS 0.45%Jul 17, 2025
- Critical9.1The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp_manga_delete_zip() function in all versions up toCheck if you run itEPSS 0.99%Jul 17, 2025
- Medium5.1A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.33%Jul 17, 2025
- Critical9.6GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included inCheck if you run itEPSS 0.49%Jul 17, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.38%Jul 17, 2025
- Critical9.8nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin.Check if you run itEPSS 0.38%Jul 17, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affectsPatch nowKEVEPSS 0.50%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- High8.6A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method.Check if you run itEPSS 1.48%Jul 16, 2025
- Critical9.3A stack-based buffer overflow exists in Achat v0.150 in its default configuration.Check if you run itEPSS 1.88%Jul 16, 2025
- High8.7A path traversal vulnerability exists in RIPS Scanner version 0.54.Check if you run itEPSS 2.47%Jul 16, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01.Check if you run itEPSS 4.34%Jul 16, 2025
Sort