Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header.Check if you run itEPSS 1.20%Aug 20, 2025
- High8.7Solar FTP Server fails to properly handle format strings passed to the USER command.Check if you run itEPSS 1.08%Aug 20, 2025
- High8.7Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem.Check if you run itEPSS 1.80%Aug 20, 2025
- High8.4MJM QuickPlayer (also known as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file.Check if you run itEPSS 0.41%Aug 20, 2025
- High8.4MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files.Check if you run itEPSS 0.42%Aug 20, 2025
- High8.4Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files.Check if you run itEPSS 0.41%Aug 20, 2025
- Critical9.3LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser.Check if you run itEPSS 1.19%Aug 20, 2025
- High8.7Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake.Check if you run itEPSS 1.31%Aug 20, 2025
- High8.4AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files.Check if you run itEPSS 0.58%Aug 20, 2025
- Medium6.5IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.50%Aug 20, 2025
- Critical9.3A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 bCheck if you run itEPSS 1.90%Aug 20, 2025
- Medium4.6QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality.Check if you run itEPSS 0.23%Aug 20, 2025
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality.Check if you run itEPSS 0.13%Aug 20, 2025
- High8.4CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access mCheck if you run itEPSS 0.19%Aug 20, 2025
- Medium4.8QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality.Check if you run itEPSS 0.19%Aug 20, 2025
- Medium5.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user,Check if you run itEPSS 0.25%Aug 20, 2025
- Medium4.3In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script filesCheck if you run itEPSS 0.80%Aug 20, 2025
- Medium5.5In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email contentCheck if you run itEPSS 0.28%Aug 20, 2025
- High7.5In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipCheck if you run itEPSS 0.12%Aug 20, 2025
- High8.7In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram contentCheck if you run itEPSS 0.28%Aug 20, 2025
- Medium5.2In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCheck if you run itEPSS 0.43%Aug 20, 2025
- Medium6.5In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server startCheck if you run itEPSS 0.13%Aug 20, 2025
- Medium6.5In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden filesCheck if you run itEPSS 0.25%Aug 20, 2025
- Medium4.7In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCheck if you run itEPSS 0.20%Aug 20, 2025
- Medium5.3Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file pathCheck if you run itEPSS 0.29%Aug 20, 2025
Sort