Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownZyxel emg3525-t50b_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.65%Jul 16, 2025
- Critical9.1An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requestsCheck if you run itEPSS 1.19%Jul 15, 2025
- Critical9.1Conjur provides secrets management and application identity for infrastructure.Check if you run itEPSS 1.45%Jul 15, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.Check if you run itEPSS 2.57%Jul 15, 2025
- Critical10.0A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14.Check if you run itEPSS 1.67%Jul 15, 2025
- High8.6A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34.Check if you run itEPSS 1.49%Jul 15, 2025
- High8.1The Restrict File Access plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.Check if you run itEPSS 0.30%Jul 15, 2025
- Medium5.3A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748.Check if you run itEPSS 2.38%Jul 14, 2025
- Medium5.3A vulnerability was found in TOTOLINK T6 4.1.5cu.748.Check if you run itEPSS 2.38%Jul 14, 2025
- High8.6A vulnerability was found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 1.30%Jul 14, 2025
- High8.6A vulnerability was found in D-Link DI-8100 16.07.26A1 and classified as critical.Check if you run itEPSS 1.30%Jul 14, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical.Check if you run itEPSS 0.40%Jul 14, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.40%Jul 14, 2025
- Medium5.3A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.40%Jul 14, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.40%Jul 14, 2025
- Critical9.8Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter.Check if you run itEPSS 1.79%Jul 14, 2025
- Critical9.3Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.01%Jul 14, 2025
- UnknownRed Hat JBoss Application Server Improper AuthenticationPatch nowKEVEPSS 2.94%Jul 14, 2025
- Medium5.3A vulnerability was found in Dromara Northstar up to 7.3.5.Check if you run itEPSS 0.33%Jul 13, 2025
- Medium5.3Liferay digital_experience_platform Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.43%Jul 13, 2025
- Unknownhorizontcms_project horizontcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 18.46%Jul 13, 2025
- Medium4.9A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can perform an arbitrary file read via a maliciously crafted web reCheck if you run itEPSS 0.98%Jul 12, 2025
- High8.2Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.28%Jul 11, 2025
- Medium6.8An Improper Access Control vulnerability in the User Interface (UI) of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a DeCheck if you run itEPSS 0.16%Jul 11, 2025
- Medium6.0A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a DCheck if you run itEPSS 0.25%Jul 11, 2025
Sort