Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP LocCheck if you run itEPSS 0.69%Jun 20, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affectCheck if you run itEPSS 0.24%Jun 20, 2025
- High8.1IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resouCheck if you run itEPSS 0.37%Jun 20, 2025
- Critical9.8Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export.Check if you run itEPSS 0.50%Jun 20, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb tCheck if you run itEPSS 0.16%Jun 20, 2025
- Medium6.4The Euro FxRef Currency Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's currency shortcode in all versions up to, and including, 2.0.2Check if you run itEPSS 0.28%Jun 20, 2025
- Medium6.9A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.46%Jun 20, 2025
- Medium5.5Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernelCheck if you run itEPSS 0.25%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.48%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.48%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical.Check if you run itEPSS 0.48%Jun 20, 2025
- Medium5.5rapid7 velociraptor Incorrect Default PermissionsPatch nowKEVEPSS 1.03%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.51%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.51%Jun 20, 2025
- High7.5Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a netCheck if you run itEPSS 0.83%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.51%Jun 20, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical.Check if you run itEPSS 0.51%Jun 20, 2025
- High8.7A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical.Check if you run itEPSS 1.33%Jun 20, 2025
- High8.7A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03.Check if you run itEPSS 1.33%Jun 20, 2025
- Critical9.1An issue was discovered in COROS PACE 3 through 3.0808.0.Check if you run itEPSS 0.59%Jun 20, 2025
- Medium6.2An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the syscallCheck if you run itEPSS 0.22%Jun 20, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.19%Jun 20, 2025
- Critical9.4Edimax ew-7438rpn_mini_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.51%Jun 20, 2025
- Critical9.4Edimax ew-7438rpn_mini_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.90%Jun 20, 2025
- High8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.60%Jun 20, 2025
Sort