Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couldCheck if you run itEPSS 0.22%Aug 14, 2025
- Medium6.5The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or maliciousCheck if you run itEPSS 0.33%Aug 14, 2025
- Medium6.5Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.33%Aug 13, 2025
- Low2.7Active Record connects classes to relational database tables.Check if you run itEPSS 0.59%Aug 13, 2025
- Medium5.3A vulnerability has been found in code-projects Medical Store Management System 1.0.Check if you run itEPSS 0.41%Aug 13, 2025
- Critical10.0WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into incluCheck if you run itEPSS 2.46%Aug 13, 2025
- Critical10.0Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script.Check if you run itEPSS 2.30%Aug 13, 2025
- Critical10.0Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality.Check if you run itEPSS 5.80%Aug 13, 2025
- Critical10.0Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts.Check if you run itEPSS 2.76%Aug 13, 2025
- High8.7S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler.Check if you run itEPSS 1.92%Aug 13, 2025
- Critical10.0RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests.Check if you run itEPSS 2.04%Aug 13, 2025
- Critical9.4QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths.Check if you run itEPSS 2.35%Aug 13, 2025
- High8.7PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality.Check if you run itEPSS 1.52%Aug 13, 2025
- High8.4NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files.Check if you run itEPSS 0.51%Aug 13, 2025
- High8.4Lattice Semiconductor ispVM System v18.0.2 contains a buffer overflow vulnerability in its handling of .xcf project files.Check if you run itEPSS 0.51%Aug 13, 2025
- High8.7GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file.Check if you run itEPSS 0.44%Aug 13, 2025
- Critical9.3ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command.Check if you run itEPSS 2.37%Aug 13, 2025
- Medium6.3A vulnerability was determined in mtons mblog up to 3.5.0.Check if you run itEPSS 0.65%Aug 13, 2025
- Medium6.9A vulnerability was determined in code-projects Job Diary 1.0.Check if you run itEPSS 0.46%Aug 13, 2025
- High7.3A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of serviCheck if you run itEPSS 0.17%Aug 13, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could cause a code injection issue by providing a mCheck if you run itEPSS 0.22%Aug 13, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue.Check if you run itEPSS 0.22%Aug 13, 2025
- High7.8NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injection issue.Check if you run itEPSS 0.77%Aug 13, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allCheck if you run itEPSS 0.45%Aug 13, 2025
- Medium6.7An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allCheck if you run itEPSS 0.42%Aug 13, 2025
Sort