Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protoco…Check if you run itEPSS 0.12%May 8, 2026
- High8.6The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow…Check if you run itEPSS 0.26%May 8, 2026
- Low3.0In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.Check if you run itEPSS 0.34%May 8, 2026
- Critical9.9Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.Check if you run itEPSS 0.68%May 8, 2026
- Critical9.1Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property.Check if you run itEPSS 0.81%May 8, 2026
- Critical9.8RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable.Check if you run itEPSS 0.39%May 8, 2026
- High7.3An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209.Check if you run itEPSS 3.60%May 8, 2026
- Critical9.81C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sendin…Check if you run itEPSS 1.55%May 8, 2026
- Medium6.3Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending…Check if you run itEPSS 1.03%May 8, 2026
- High7.3AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.Check if you run itEPSS 0.28%May 8, 2026
- Critical9.8Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL state…Check if you run itEPSS 0.90%May 8, 2026
- High7.3LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution.Check if you run itEPSS 0.49%May 8, 2026
- Critical9.1LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's u…Check if you run itEPSS 7.18%May 8, 2026
- High7.5yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).Check if you run itEPSS 0.43%May 8, 2026
- High7.3A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter.Check if you run itEPSS 3.89%May 8, 2026
- Medium5.4SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.Check if you run itEPSS 0.63%May 8, 2026
- Medium6.3SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].Check if you run itEPSS 0.24%May 8, 2026
- High7.3Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.Check if you run itEPSS 0.92%May 8, 2026
- Medium6.3/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a…Check if you run itEPSS 1.14%May 8, 2026
- High7.5Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB ser…Check if you run itEPSS 0.59%May 8, 2026
- Medium5.3In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced an…Check if you run itEPSS 0.72%May 8, 2026
- High7.8NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.Check if you run itEPSS 0.09%May 8, 2026
- High7.4A vulnerability was found in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.57%May 8, 2026
- High7.4A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113.Check if you run itEPSS 0.46%May 8, 2026
- Medium5.8solidtime is an open-source time-tracking app.Check if you run itEPSS 0.27%May 8, 2026
Sort