Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Lattice Semiconductor ispVM System v18.0.2 contains a buffer overflow vulnerability in its handling of .xcf project files.Check this weekEPSS 51.00%Aug 13, 2025
- Critical9.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 7.50%Aug 13, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafteCheck this weekEPSS 40.00%Aug 13, 2025
- Medium4.5Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX may allow a privilegedCheck this weekEPSS 14.00%Aug 12, 2025
- High8.6A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All veCheck this weekEPSS 24.00%Aug 12, 2025
- Medium4.8A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3).Check this weekEPSS 12.00%Aug 12, 2025
- Critical9.4A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2).Check this weekEPSS 67.00%Aug 12, 2025
- High8.7A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5Check this weekEPSS 24.00%Aug 12, 2025
- Medium5.1YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint.Check this weekEPSS 23.00%Aug 11, 2025
- High7.0YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations.Check this weekEPSS 34.00%Aug 11, 2025
- Medium4.6A stored Cross-Site Scripting vulnerability (XSS) occurs when the server does not properly validate or encode the data entered by the user.Check this weekEPSS 19.00%Aug 11, 2025
- Critical9.3XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 1.65%Aug 8, 2025
- High8.4Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files.Check this weekEPSS 42.00%Aug 8, 2025
- Critical10.0Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism.Check if you run itEPSS 1.33%Aug 8, 2025
- Critical9.3An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6.Check if you run itEPSS 1.67%Aug 8, 2025
- Critical9.3A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface.Check this weekEPSS 42.00%Aug 8, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 80.34%Aug 7, 2025
- UnknownGrafana Labs Grafana Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.06%Aug 7, 2025
- High7.1XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server.Check if you run itEPSS 1.31%Aug 5, 2025
- Critical10.0The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php.Check if you run itEPSS 1.72%Aug 5, 2025
- High8.7Maxthon3 version 3.2.2 build 1000 and prior are vulnerable to cross context scripting (XCS) via the about:history page.Check if you run itEPSS 1.33%Aug 5, 2025
- Medium6.9A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0.Check if you run itEPSS 2.50%Aug 5, 2025
- Critical10.0The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in commanCheck this weekEPSS 16.72%Aug 5, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/.Check this weekEPSS 38.00%Aug 5, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability inCheck if you run itEPSS 1.85%Aug 4, 2025