Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Atcom 100M IP Phones firmware version 2.7.x.x contains an authenticated command injection vulnerability in the web configuration CGI script that allows attackers to execute arbitraCheck if you run itEPSS 1.56%Dec 12, 2025
- High8.7Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier.Check if you run itEPSS 0.42%Dec 12, 2025
- High8.6WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint.Check if you run itEPSS 0.43%Dec 12, 2025
- Critical9.3PCMan FTP Server 2.0 contains a buffer overflow vulnerability in the 'pwd' command that allows remote attackers to execute arbitrary code.Check if you run itEPSS 0.94%Dec 12, 2025
- High8.5Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system commands.Check if you run itEPSS 1.15%Dec 12, 2025
- Medium4.3Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to perform domain spoofing via a crafted HTML page.Check if you run itEPSS 0.28%Dec 12, 2025
- Medium5.3A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0.Check if you run itEPSS 0.23%Dec 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound new_pba Discovered by Atuin - Automated Vulnerability Discovery EngineCheck if you run itEPSS 0.20%Dec 12, 2025
- Medium6.9A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0.Check if you run itEPSS 0.77%Dec 12, 2025
- High8.5BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoNTFS: 1.3.2.Check if you run itEPSS 0.21%Dec 12, 2025
- Medium6.9A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464.Check if you run itEPSS 0.39%Dec 12, 2025
- Medium5.3In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists.Check if you run itEPSS 0.48%Dec 12, 2025
- Medium4.8SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s broCheck if you run itEPSS 0.17%Dec 12, 2025
- Low2.4SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop.Check if you run itEPSS 0.16%Dec 12, 2025
- High8.6SolarEdge SE3680H ships with an outdated Linux kernel containing unpatched vulnerabilities in core subsystems.Check if you run itEPSS 0.23%Dec 12, 2025
- High7.2APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access.Check if you run itEPSS 0.12%Dec 12, 2025
- Low2.4The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions.Check if you run itEPSS 0.17%Dec 12, 2025
- Medium6.4The AI Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aife_post_meta' shortcode in all versions up to, and including, 1.0.22 due to insufficient iCheck if you run itEPSS 0.22%Dec 12, 2025
- Medium5.3The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accesCheck if you run itEPSS 0.32%Dec 12, 2025
- Medium4.3The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2.Check if you run itEPSS 0.16%Dec 12, 2025
- Medium4.3The Simple Bike Rental plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'simpbire_carica_prenotazioni' AJAX action in allCheck if you run itEPSS 0.24%Dec 12, 2025
- High8.8A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store.Check if you run itEPSS 1.04%Dec 12, 2025
- Medium5.5The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_description' and 'success_message' parameters in versions uCheck if you run itEPSS 0.34%Dec 12, 2025
- Medium5.3The Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.9.10.Check if you run itEPSS 0.39%Dec 12, 2025
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512).Check if you run itEPSS 0.20%Dec 12, 2025
Sort