Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/adCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium4.7A vulnerability has been identified within Rancher Manager whereby headers are being sent to an external entity, for example , via the Rancher endpoint.Check if you run itEPSS 0.36%Oct 2, 2025
- Medium5.9Exposure of sensitive information in Viday.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7Exposure of sensitive information in Viday.Check if you run itEPSS 0.34%Oct 2, 2025
- Medium5.1Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonateCheck if you run itEPSS 0.35%Oct 2, 2025
- High7.5Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTCheck if you run itEPSS 0.13%Oct 2, 2025
- Critical9.8The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticatCheck if you run itEPSS 0.44%Oct 2, 2025
- High7.1KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT STUDIO versions 8.53 and prior contain a use after free vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High7.1VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability.Check if you run itEPSS 0.14%Oct 2, 2025
- High8.4KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.4KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulneCheck if you run itEPSS 0.30%Oct 2, 2025
- Critical9.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path TraverCheck if you run itEPSS 0.28%Oct 2, 2025
- High7.5Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.40%Oct 2, 2025
- High7.5Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.49%Oct 2, 2025
- Medium5.3Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.42%Oct 2, 2025
- High7.5Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.49%Oct 2, 2025
- Critical9.8The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI ComputCheck if you run itEPSS 0.67%Oct 2, 2025
- Medium6.2The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has aCheck if you run itEPSS 0.17%Oct 2, 2025
- Medium5.1FrostWire 6.14.0-build-326 for macOS contains permissive entitlements (allow-dyld-environment-variables, disable-library-validation) that allow unprivileged local attackers to injeCheck if you run itEPSS 0.14%Oct 2, 2025
- Medium6.5ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and group_by parameters.Check if you run itEPSS 0.31%Oct 2, 2025
- Medium6.5Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the frappe.client.get_value API endpoint and a crafted script to thCheck if you run itEPSS 0.31%Oct 2, 2025
- High7.5TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlnad.Check if you run itEPSS 3.44%Oct 2, 2025
Sort