Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier.Check if you run itEPSS 0.14%Jun 26, 2025
- Medium5.3Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier.Check if you run itEPSS 0.24%Jun 26, 2025
- Medium5.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed unauthenticated attCheck if you run itEPSS 0.30%Jun 26, 2025
- Low3.1An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated usersCheck if you run itEPSS 0.31%Jun 26, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated attacCheck if you run itEPSS 0.37%Jun 26, 2025
- Medium4.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated usersCheck if you run itEPSS 0.26%Jun 26, 2025
- High8.0A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.44%Jun 26, 2025
- Medium5.4A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.30%Jun 26, 2025
- UnknownD-Link dsl-2730u_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.68%Jun 26, 2025
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.88%Jun 26, 2025
- Unknownweiphp weiphp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.20%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.85%Jun 26, 2025
- High8.7A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical.Check if you run itEPSS 5.67%Jun 25, 2025
- Medium5.0Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability.Check if you run itEPSS 0.17%Jun 25, 2025
- Medium4.5OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.Check if you run itEPSS 0.33%Jun 25, 2025
- Medium6.5Ruby WEBrick read_header HTTP Request Smuggling Vulnerability.Check if you run itEPSS 0.50%Jun 25, 2025
- High8.1Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry.Check if you run itEPSS 0.44%Jun 25, 2025
- High8.1Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry.Check if you run itEPSS 0.68%Jun 25, 2025
- Medium4.6Tuleap is an Open Source Suite to improve management of software developments and collaboration.Check if you run itEPSS 0.17%Jun 25, 2025
- Medium4.3URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.Check if you run itEPSS 0.44%Jun 25, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Unknownvendure vendure Improper Input ValidationPatch nowKEVEPSS 60.42%Jun 25, 2025
- High8.7A vulnerability was found in Netgear WNCE3001 1.0.0.50.Check if you run itEPSS 0.89%Jun 24, 2025
- High8.6When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding.Check if you run itEPSS 0.35%Jun 24, 2025
- Critical9.3WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function.Check if you run itEPSS 2.16%Jun 24, 2025
Sort