Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php.Check if you run itEPSS 1.80%Aug 8, 2025
- Critical10.0MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script.Check if you run itEPSS 1.89%Aug 8, 2025
- Critical10.0Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism.Check if you run itEPSS 1.33%Aug 8, 2025
- Critical9.3Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device.Check if you run itEPSS 0.96%Aug 8, 2025
- High7.5In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities.Check if you run itEPSS 8.81%Aug 8, 2025
- Medium6.9A vulnerability was identified in the XPC services of Fantastical.Check if you run itEPSS 0.39%Aug 7, 2025
- Medium5.3Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources.Check if you run itEPSS 0.29%Aug 7, 2025
- Medium5.3An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request.Check if you run itEPSS 0.32%Aug 7, 2025
- Medium4.0An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.Check if you run itEPSS 0.56%Aug 7, 2025
- High7.5Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contCheck if you run itEPSS 0.60%Aug 6, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.Check if you run itEPSS 0.40%Aug 6, 2025
- Medium5.9NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request.Check if you run itEPSS 0.77%Aug 6, 2025
- High7.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation faulCheck if you run itEPSS 0.61%Aug 6, 2025
- High7.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providCheck if you run itEPSS 0.49%Aug 6, 2025
- High7.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providCheck if you run itEPSS 0.56%Aug 6, 2025
- High7.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a stream is cancelled before it is processed.Check if you run itEPSS 0.58%Aug 6, 2025
- High7.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an invalid request.Check if you run itEPSS 0.50%Aug 6, 2025
- High7.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sendingCheck if you run itEPSS 0.93%Aug 6, 2025
- High8.1NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request.Check if you run itEPSS 1.58%Aug 6, 2025
- Critical9.1NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request.Check if you run itEPSS 2.04%Aug 6, 2025
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests.Check if you run itEPSS 2.60%Aug 6, 2025
- Medium5.1A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.Check if you run itEPSS 0.21%Aug 6, 2025
- High7.8Memory corruption while processing simultaneous requests via escape path.Check if you run itEPSS 0.07%Aug 6, 2025
- High7.5Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request.Check if you run itEPSS 0.41%Aug 6, 2025
- Medium6.5MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed.Check if you run itEPSS 0.25%Aug 6, 2025
Sort