Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.Check this weekEPSS 19.00%Jun 21, 2025
- Medium5.3Missing Authorization vulnerability in thanhtungtnt Video List Manager video-list-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Video LCheck this weekEPSS 29.00%Jun 20, 2025
- Medium5.3Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contentstudio: fCheck this weekEPSS 29.00%Jun 20, 2025
- Medium5.3Missing Authorization vulnerability in tggfref WP-Recall allows Accessing Functionality Not Properly Constrained by ACLs.Check this weekEPSS 38.00%Jun 20, 2025
- Medium5.3Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issCheck this weekEPSS 40.00%Jun 20, 2025
- Medium5.3Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affeCheck this weekEPSS 31.00%Jun 20, 2025
- Critical9.4Edimax ew-7438rpn_mini_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.81%Jun 20, 2025
- High8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.56%Jun 20, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.79%Jun 20, 2025
- Critical9.3minidvblinux minidvblinux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.55%Jun 20, 2025
- Critical9.5Meshtastic is an open source mesh networking solution.Check this weekEPSS 58.00%Jun 19, 2025
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 4.74%Jun 19, 2025
- Medium6.1The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo.Check this weekEPSS 38.00%Jun 18, 2025
- Medium4.9Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificatesOpen the advisoryJun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: coresight: Clear the connection field properly coresight devices track their connections (output connections) anCheck this weekEPSS 23.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: kunit: executor: Fix a memory leak on failure in kunit_filter_tests It's possible that memory allocation for 'fiCheck this weekEPSS 24.00%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/ttm: fix CCS handling Crucible + recent Mesa seems to sometimes hit: GEM_BUG_ON(num_ccs_blks > NUM_CCS_Check if you run itEPSS 0.21%Jun 18, 2025
- Medium5.3Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AFS Analytics: frCheck this weekEPSS 25.00%Jun 17, 2025
- Medium5.3Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through <= 2.9.4Check this weekEPSS 25.00%Jun 17, 2025
- High7.8A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input.Check this weekEPSS 32.00%Jun 17, 2025
- Medium4.8Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface.Check this weekEPSS 32.00%Jun 17, 2025
- Low2.5A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.Check if you run itEPSS 0.32%Jun 16, 2025
- Critical9.1Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.Check this weekEPSS 42.00%Jun 16, 2025
- Critical9.8The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1.Check if you run itEPSS 0.48%Jun 12, 2025
- Medium6.7A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.Check if you run itEPSS 0.31%Jun 11, 2025