Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.Check if you run itEPSS 0.55%Dec 3, 2025
- High8.8AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function.Check this weekEPSS 17.20%Dec 3, 2025
- Medium6.5AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the test_mail function.Check if you run itEPSS 2.40%Dec 3, 2025
- High8.8AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary.Check if you run itEPSS 3.33%Dec 3, 2025
- High8.8AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint.Check if you run itEPSS 2.81%Dec 3, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Medium5.3An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, MoCheck if you run itEPSS 0.29%Dec 3, 2025
- High7.8The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escCheck if you run itEPSS 0.15%Dec 3, 2025
- Medium5.1Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe in the function main.cpp, which can leaCheck if you run itEPSS 0.21%Dec 3, 2025
- Critical10.0wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- High8.7NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.Check if you run itEPSS 0.42%Dec 2, 2025
- High8.4NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords.Check if you run itEPSS 0.12%Dec 2, 2025
- High8.6NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked instCheck if you run itEPSS 0.23%Dec 2, 2025
- High7.1NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on clientCheck if you run itEPSS 0.12%Dec 2, 2025
- Critical9.8The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.37%Dec 2, 2025
- Medium4.3Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spCheck if you run itEPSS 0.23%Dec 2, 2025
- Medium6.4A container privilege escalation flaw was found in certain CodeReady Workspaces images.Check if you run itEPSS 0.18%Dec 2, 2025
- High7.7The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components.Check if you run itEPSS 0.28%Dec 2, 2025
- Medium5.3Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.Check if you run itEPSS 0.19%Dec 2, 2025
- Medium5.3Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.Check if you run itEPSS 0.31%Dec 2, 2025
- Medium5.3Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.Check if you run itEPSS 0.19%Dec 2, 2025
- Medium6.5Arcade MCP allows you to to create, deploy, and share MCP Servers.Check if you run itEPSS 0.31%Dec 2, 2025
- High7.4Cacti is an open source performance and fault management framework.Check this weekEPSS 10.81%Dec 2, 2025
- Medium5.3Apptainer is an open source container platform.Check if you run itEPSS 0.23%Dec 2, 2025
Sort