Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle.Check if you run itEPSS 0.18%May 22, 2025
- Medium6.4The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 8.6.4 due to insufficient input sanitizationCheck if you run itEPSS 0.25%May 22, 2025
- Medium5.4The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 8.4.0 does not escape the title of posts when outputting them in a dashboard, which could allow users wiCheck if you run itEPSS 0.29%May 22, 2025
- High7.0GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.14%May 22, 2025
- High7.2Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.65%May 22, 2025
- Medium5.3MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability.Check if you run itEPSS 0.17%May 22, 2025
- Critical9.8MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.63%May 22, 2025
- Critical9.8MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.63%May 22, 2025
- Critical9.8MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.63%May 22, 2025
- Critical9.8MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 1.04%May 22, 2025
- Medium5.3Harman Becker MGU21 Bluetooth Improper Input Validation Denial-of-Service Vulnerability.Check if you run itEPSS 0.29%May 22, 2025
- High7.5Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 1.76%May 22, 2025
- High8.8eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%May 22, 2025
- High8.8eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%May 22, 2025
- High8.8eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%May 22, 2025
- High7.5mapsvg mapsvg Missing AuthorizationPatch nowKEVEPSS 0.45%May 22, 2025
- High8.8Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account.Check if you run itEPSS 0.37%May 22, 2025
- High8.8Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account.Check if you run itEPSS 0.41%May 22, 2025
- High8.8Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account.Check if you run itEPSS 0.37%May 22, 2025
- Medium6.5infoblox netmri Improper AuthenticationPatch nowKEVEPSS 39.16%May 22, 2025
- Critical9.8infoblox netmri Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 35.85%May 22, 2025
- High7.2infoblox netmri Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 43.28%May 22, 2025
- Medium5.3Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access.Check if you run itEPSS 9.34%May 22, 2025
- High8.8In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.Check this weekEPSS 10.65%May 22, 2025
- High7.2An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.Check if you run itEPSS 0.57%May 22, 2025
Sort