Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allowsCheck this weekEPSS 27.00%Aug 14, 2025
- High8.8The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/atCmd.Check this weekEPSS 23.16%Aug 14, 2025
- UnknownApache Superset Improper Input ValidationPatch nowKEVEPSS 86.03%Aug 12, 2025
- UnknownApache Superset Deserialization of Untrusted DataPatch nowKEVEPSS 35.45%Aug 12, 2025
- Medium5.1YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint.Check this weekEPSS 23.00%Aug 11, 2025
- Critical9.3An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6.Check if you run itEPSS 1.67%Aug 8, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.QCheck this weekEPSS 59.00%Aug 8, 2025
- Medium6.5OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check this weekEPSS 31.00%Aug 8, 2025
- Medium6.5OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check this weekEPSS 27.00%Aug 8, 2025
- High7.1OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check this weekEPSS 34.00%Aug 8, 2025
- High7.1OpenMetadata <=1.4.4 is vulnerable to SQL Injection.Check this weekEPSS 34.00%Aug 8, 2025
- Critical9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or othCheck this weekEPSS 61.00%Aug 7, 2025
- Critical9.8A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirableCheck this weekEPSS 69.00%Aug 7, 2025
- Critical9.8An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects.Check this weekEPSS 62.00%Aug 7, 2025
- Critical9.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects.Check this weekEPSS 67.00%Aug 7, 2025
- Critical9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution orCheck this weekEPSS 62.00%Aug 7, 2025
- Critical9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects.Check this weekEPSS 62.00%Aug 7, 2025
- High7.2The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in file metadata in all versionsCheck this weekEPSS 26.00%Aug 5, 2025
- High8.7A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module.Check if you run itEPSS 1.60%Aug 1, 2025
- High8.6The go command may execute unexpected commands when operating in untrusted VCS repositories.Check this weekEPSS 44.00%Jul 29, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is a continuous memory leCheck if you run itEPSS 0.40%Jul 25, 2025
- High8.8The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1.Check this weekEPSS 41.00%Jul 23, 2025
- Medium4.3Certain instructions need intercepting and emulating by Xen.Check this weekEPSS 71.00%Jul 16, 2025
- High8.1A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects.Check this weekEPSS 42.00%Jul 11, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() Since handle->h_transaction may be a NULCheck this weekEPSS 20.00%Jul 10, 2025