Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.7Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation.Check if you run itEPSS 2.02%Dec 10, 2025
- High8.2Neuron is a PHP framework for creating and orchestrating AI Agents.Check if you run itEPSS 0.29%Dec 10, 2025
- Critical9.4Neuron is a PHP framework for creating and orchestrating AI Agents.Check if you run itEPSS 0.41%Dec 10, 2025
- Medium6.9FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.Check if you run itEPSS 0.27%Dec 10, 2025
- High7.5ImageMagick is a software suite to create, edit, compose, or convert bitmap images.Check if you run itEPSS 0.51%Dec 10, 2025
- High8.7XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).Check if you run itEPSS 1.02%Dec 10, 2025
- High8.7XWiki is an open-source wiki software platform.Check if you run itEPSS 0.40%Dec 10, 2025
- Medium5.3Okta Java Management SDK facilitates interactions with the Okta management API.Check if you run itEPSS 0.27%Dec 10, 2025
- Medium5.3Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles.Check if you run itEPSS 0.26%Dec 10, 2025
- High8.6PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoinCheck if you run itEPSS 1.10%Dec 10, 2025
- High8.7WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager.Check if you run itEPSS 0.66%Dec 10, 2025
- High8.6Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality.Check if you run itEPSS 1.02%Dec 10, 2025
- High8.7Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality.Check if you run itEPSS 0.94%Dec 10, 2025
- High8.6CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files.Check if you run itEPSS 0.94%Dec 10, 2025
- High8.6appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoiCheck if you run itEPSS 0.95%Dec 10, 2025
- High8.7Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers.Check if you run itEPSS 0.48%Dec 10, 2025
- High7.1Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls.Check if you run itEPSS 0.40%Dec 10, 2025
- Medium5.1Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers.Check if you run itEPSS 0.73%Dec 10, 2025
- High8.6Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials.Check if you run itEPSS 0.88%Dec 10, 2025
- High8.7EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allows remote attackers to access sensitive configuration files vCheck if you run itEPSS 0.73%Dec 10, 2025
- Critical9.3Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object maCheck if you run itEPSS 0.80%Dec 10, 2025
- High8.7Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root direcCheck if you run itEPSS 1.57%Dec 10, 2025
- Critical9.3Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles.Check if you run itEPSS 1.05%Dec 10, 2025
- Critical9.3Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code.Check if you run itEPSS 1.23%Dec 10, 2025
- High7.8Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.16%Dec 10, 2025
Sort