Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts.Check if you run itEPSS 0.35%Jan 15, 2026
- High8.4Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges.Check if you run itEPSS 0.20%Jan 15, 2026
- Medium6.9SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details.Check this weekEPSS 59.00%Jan 15, 2026
- High7.5Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.Check if you run itEPSS 0.63%Jan 15, 2026
- High7.5Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.Check if you run itEPSS 0.63%Jan 15, 2026
- High8.5Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access.Check if you run itEPSS 0.14%Jan 15, 2026
- Medium6.7Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file.Check if you run itEPSS 0.29%Jan 15, 2026
- High8.8Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint.Check this weekEPSS 25.00%Jan 15, 2026
- Medium6.9Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints.Check if you run itEPSS 0.38%Jan 15, 2026
- High8.410-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution.Check if you run itEPSS 0.70%Jan 15, 2026
- High8.510-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges.Check if you run itEPSS 0.24%Jan 15, 2026
- Medium6.7AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields.Check if you run itEPSS 0.19%Jan 15, 2026
- Medium6.7AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields.Check if you run itEPSS 0.19%Jan 15, 2026
- High8.8Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries.Check if you run itEPSS 0.34%Jan 15, 2026
- High8.5HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges.Check this weekEPSS 14.00%Jan 15, 2026
- High8.7Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServletCheck this weekEPSS 82.00%Jan 15, 2026
- Medium6.9Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication.Check if you run itEPSS 0.23%Jan 15, 2026
- Critical9.3phpKF CMS 3.00 Beta y6 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary code by bypassing file extension checks.Check this weekEPSS 78.00%Jan 15, 2026
- High8.7AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests.Check this weekEPSS 58.00%Jan 15, 2026
- High7.1Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause aCheck if you run itEPSS 0.33%Jan 15, 2026
- Medium5.3The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kalium_vc_contact_forCheck this weekEPSS 27.00%Jan 15, 2026
- High7.3A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler.Check if you run itEPSS 0.17%Jan 15, 2026
- Critical9.3chanjetvip t\+ Deserialization of Untrusted DataPatch nowKEVEPSS 1.10%Jan 15, 2026
- Medium4.8Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status move message haCheck if you run itEPSS 0.23%Jan 14, 2026
- Medium4.8Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status functionality.Check if you run itEPSS 0.23%Jan 14, 2026
Sort