Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause…Check if you run itEPSS 0.13%Jun 25, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 1.91%Jun 25, 2026
- Critical9.6NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.Check if you run itEPSS 0.35%Jun 18, 2026
- Medium5.1A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.Check if you run itEPSS 0.44%Jun 10, 2026
- Unknownupdraftplus updraftplus Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 3.64%Jun 10, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->con…Check if you run itEPSS 0.56%Jun 8, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 77.36%Jun 4, 2026
- Medium5.5A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08.Check if you run itEPSS 0.40%Jun 3, 2026
- Medium4.8FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.44%Jun 3, 2026
- Medium4.1Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_pageCheck if you run itEPSS 0.32%Jun 3, 2026
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting i…Check if you run itEPSS 0.30%Jun 3, 2026
- High7.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode.Check if you run itEPSS 0.14%Jun 3, 2026
- High8.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and Get…Check if you run itEPSS 0.33%Jun 3, 2026
- Medium4.8Dovestones Softwares ADPhonebook before v4.0.1.1 is vulnerable to a Cross Site Scripting vulnerability.Check if you run itEPSS 0.25%Jun 3, 2026
- Medium5.1backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.Check if you run itEPSS 0.30%Jun 3, 2026
- Medium5.1ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects.Check if you run itEPSS 0.49%Jun 3, 2026
- Medium4.1An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4…Check if you run itEPSS 0.30%Jun 3, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0.Check if you run itEPSS 0.28%Jun 3, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Online Boat Reservation System 1.0.Check if you run itEPSS 0.21%Jun 3, 2026
- Medium4.3The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.19%Jun 3, 2026
- Medium4.4The Passeum Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.0.Check if you run itEPSS 0.33%Jun 3, 2026
- Medium6.5LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.39%Jun 2, 2026
- Critical9.1alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.Check if you run itEPSS 0.42%Jun 2, 2026
- Critical9.6LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.41%Jun 2, 2026