Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.Check if you run itEPSS 0.34%Aug 6, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- Medium5.3Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication.Check if you run itEPSS 0.56%Aug 5, 2025
- High8.7Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects.Check if you run itEPSS 0.39%Aug 5, 2025
- Critical9.3Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects.Check if you run itEPSS 0.37%Aug 5, 2025
- Critical9.1react-native-bottom-tabs is a library of Native Bottom Tabs for React Native.Check if you run itEPSS 0.48%Aug 5, 2025
- High7.1XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server.Check if you run itEPSS 1.30%Aug 5, 2025
- Critical10.0The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php.Check if you run itEPSS 1.72%Aug 5, 2025
- Critical10.0PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sanitization.Check if you run itEPSS 2.10%Aug 5, 2025
- High8.6Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via craCheck if you run itEPSS 1.41%Aug 5, 2025
- Critical9.3Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow.Check if you run itEPSS 1.71%Aug 5, 2025
- Critical10.0An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3.Check if you run itEPSS 1.67%Aug 5, 2025
- Critical9.3An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.Check if you run itEPSS 1.46%Aug 5, 2025
- High7.5Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases.Check if you run itEPSS 0.37%Aug 5, 2025
- High7.3Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image.Check if you run itEPSS 0.37%Aug 5, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/.Check if you run itEPSS 0.38%Aug 5, 2025
- Medium6.5A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file upload functionality.Check if you run itEPSS 4.81%Aug 5, 2025
- Medium5.3A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0.Check if you run itEPSS 0.28%Aug 4, 2025
- Medium5.3A vulnerability was found in Exrick xboot up to 3.3.4.Check if you run itEPSS 0.33%Aug 4, 2025
- Medium5.1A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5.Check if you run itEPSS 0.37%Aug 4, 2025
- Medium6.1Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper NeutrCheck if you run itEPSS 0.24%Aug 4, 2025
- High7.5An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potenCheck if you run itEPSS 0.55%Aug 4, 2025
- Medium5.3tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structurCheck if you run itEPSS 0.34%Aug 4, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 4, 2025
- Medium5.1A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10.Check if you run itEPSS 0.32%Aug 3, 2025
Sort