Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0.Check if you run itEPSS 2.50%Aug 5, 2025
- Critical10.0The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in commanCheck this weekEPSS 16.72%Aug 5, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/.Check this weekEPSS 38.00%Aug 5, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability inCheck if you run itEPSS 1.85%Aug 4, 2025
- Critical9.3An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint expCheck if you run itEPSS 2.82%Aug 1, 2025
- High8.6An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint.Check if you run itEPSS 4.32%Aug 1, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.51%Aug 1, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8.Check if you run itEPSS 1.91%Jul 31, 2025
- High8.8A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier.Check if you run itEPSS 3.00%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Jul 31, 2025
- High8.8An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing.Check if you run itEPSS 3.40%Jul 28, 2025
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityCheck if you run itEPSS 0.65%Jul 25, 2025
- Critical10.0An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier.Check if you run itEPSS 2.47%Jul 25, 2025
- Critical9.4A command injection vulnerability exists in the eScan Web Management Console version 5.5-2.Check if you run itEPSS 4.68%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize member's pointers properly by using kzallocCheck if you run itEPSS 0.19%Jul 25, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.Check this weekEPSS 21.00%Jul 25, 2025
- High8.8The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1.Check this weekEPSS 41.00%Jul 23, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.63%Jul 23, 2025
- Unknowncedargate ez-net_portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.03%Jul 22, 2025
- Unknownopmc woocommerce_dropshipping Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.03%Jul 21, 2025
- Medium6.5Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely.Check this weekEPSS 45.00%Jul 16, 2025
- High7.3Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely.Check this weekEPSS 39.00%Jul 16, 2025
- High8.6Missing Authorization vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects URL ShorteneCheck this weekEPSS 37.00%Jul 16, 2025
- High7.5Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form responsive-contact-form allows Accessing Functionality Not Properly Constrained by ACLCheck this weekEPSS 43.00%Jul 16, 2025
- Medium5.3Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Accessing Functionality Not Properly Constrained by ACLsCheck this weekEPSS 31.00%Jul 16, 2025