Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the function of the class.Check if you run itEPSS 1.36%Aug 1, 2025
- Medium5.4CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a tranCheck if you run itEPSS 0.32%Aug 1, 2025
- Critical9.3An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script.Check this weekEPSS 13.40%Jul 31, 2025
- Critical9.2An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cooCheck if you run itEPSS 1.90%Jul 31, 2025
- High8.7A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin.Check if you run itEPSS 2.32%Jul 31, 2025
- Critical10.0An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023.Check if you run itEPSS 2.30%Jul 31, 2025
- High7.0A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript cCheck if you run itEPSS 0.23%Jul 31, 2025
- High8.6A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries.Check if you run itEPSS 1.85%Jul 31, 2025
- Critical9.3An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint.Check if you run itEPSS 1.96%Jul 31, 2025
- Critical9.3A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command.Check if you run itEPSS 2.75%Jul 31, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8.Check if you run itEPSS 2.06%Jul 31, 2025
- Critical10.0ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.Check if you run itEPSS 4.07%Jul 31, 2025
- High8.4A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration fCheck if you run itEPSS 0.56%Jul 31, 2025
- High8.8A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier.Check if you run itEPSS 2.97%Jul 31, 2025
- High8.8Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file withCheck if you run itEPSS 0.43%Jul 31, 2025
- High7.0pyjwt v2.10.1 was discovered to contain weak encryption.Check if you run itEPSS 0.18%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- High8.1An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted requestCheck if you run itEPSS 0.77%Jul 30, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
- High7.8This issue was addressed through improved state management.Check if you run itEPSS 0.21%Jul 29, 2025
- Medium5.5An authorization issue was addressed with improved state management.Check if you run itEPSS 0.17%Jul 29, 2025
- High8.6The go command may execute unexpected commands when operating in untrusted VCS repositories.Check if you run itEPSS 0.44%Jul 29, 2025
- Medium6.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.08%Jul 29, 2025
- Medium4.4VMware vCenter contains a denial-of-service vulnerability.Check if you run itEPSS 0.32%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check if you run itEPSS 0.18%Jul 29, 2025
Sort