Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.8A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area inCheck if you run itEPSS 0.25%Apr 21, 2025
- Critical9.2Local File Inclusion (LFI) vulnerability in a Render function of Formulatrix Rock Maker Web (RMW) allows a remote attacker to obtain sensitive data via arbitrary code execution.Check if you run itEPSS 0.93%Apr 21, 2025
- Medium6.8An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.57%Apr 21, 2025
- Medium6.8An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.56%Apr 21, 2025
- High8.6An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.55%Apr 21, 2025
- Medium4.3An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.43%Apr 21, 2025
- High8.1The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.Check if you run itEPSS 0.14%Apr 21, 2025
- Low3.4Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority component, which is not consistent wiCheck if you run itEPSS 0.22%Apr 21, 2025
- Low2.5In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled.Check if you run itEPSS 0.12%Apr 21, 2025
- Critical9.8A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789.Check if you run itEPSS 1.26%Apr 21, 2025
- Critical9.8Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.Check if you run itEPSS 1.52%Apr 21, 2025
- Low3.3DO NOT USE THIS CVE RECORD.Open the advisoryApr 21, 2025
- Critical9.8An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.Check if you run itEPSS 0.79%Apr 21, 2025
- Medium6.5mojoportal mojoportal Improper Access ControlPatch nowKEVEPSS 1.97%Apr 21, 2025
- Medium6.1code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary codeCheck if you run itEPSS 0.92%Apr 21, 2025
- Critical9.1Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.Check if you run itEPSS 0.40%Apr 21, 2025
- Medium6.4Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.Check if you run itEPSS 0.22%Apr 21, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parametCheck if you run itEPSS 0.25%Apr 21, 2025
- Medium4.3opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,Check if you run itEPSS 0.40%Apr 21, 2025
- High8.8The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path.Check if you run itEPSS 0.58%Apr 21, 2025
- Medium6.5Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the imCheck if you run itEPSS 0.36%Apr 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image pCheck if you run itEPSS 0.27%Apr 21, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 19.58%Apr 21, 2025
- Medium5.3A vulnerability was found in kuangstudy KuangSimpleBBS 1.0.Check if you run itEPSS 0.51%Apr 20, 2025
- Medium6.9A vulnerability was found in PHPGurukul Men Salon Management System 1.0.Check if you run itEPSS 0.63%Apr 20, 2025
Sort