Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.32%Jul 16, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical.Check this weekEPSS 40.00%Jul 14, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2.Check this weekEPSS 40.00%Jul 14, 2025
- Medium5.3A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2.Check this weekEPSS 40.00%Jul 14, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2.Check this weekEPSS 40.00%Jul 14, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the followiCheck if you run itEPSS 0.22%Jul 10, 2025
- Low2.0WeGIA is a web manager for charitable institutions.Check this weekEPSS 27.00%Jul 7, 2025
- High8.7A vulnerability was found in Belkin F9K1122 1.00.33.Check if you run itEPSS 7.68%Jul 6, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path TraCheck this weekEPSS 48.00%Jul 4, 2025
- High7.5Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.Check if you run itEPSS 4.22%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD statCheck if you run itEPSS 0.17%Jul 3, 2025
- Unknownlive555 streaming_media Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.85%Jul 1, 2025
- High7.5IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.Check this weekEPSS 44.00%Jun 28, 2025
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check this weekEPSS 77.00%Jun 25, 2025
- Medium5.3A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611.Check this weekEPSS 51.00%Jun 24, 2025
- High7.5Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a netCheck this weekEPSS 83.00%Jun 20, 2025
- UnknownFunnelKit funnelkit_automations Missing AuthorizationPatch nowKEVEPSS 3.35%Jun 18, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows StoreCheck this weekEPSS 19.00%Jun 17, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the e-mail manager function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browserCheck this weekEPSS 27.00%Jun 17, 2025
- Low2.3A vulnerability was found in comfyanonymous comfyui 0.3.40.Check this weekEPSS 43.00%Jun 16, 2025
- Medium5.1A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1.Check this weekEPSS 34.00%Jun 16, 2025
- High8.8The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.Check if you run itEPSS 0.53%Jun 11, 2025
- High7.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.51%Jun 10, 2025
- Medium6.3FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents.Check if you run itEPSS 0.45%Jun 9, 2025
- Unknownarc53 docsgpt Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 17.09%Jun 8, 2025