Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Incorrect authentication vulnerability in ParkingDoor.Check this weekEPSS 21.00%Jul 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting aCheck this weekEPSS 93.00%Jul 21, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 53.26%Jul 21, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their claCheck if you run itEPSS 0.30%Jul 19, 2025
- High7.0In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_byteCheck this weekEPSS 46.00%Jul 18, 2025
- Medium6.6RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with can lead to buffer overflow in versions up to and including 20Check this weekEPSS 86.00%Jul 18, 2025
- High7.8A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier.Check this weekEPSS 23.00%Jul 17, 2025
- High7.8A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.22%Jul 17, 2025
- High7.8A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.22%Jul 17, 2025
- High7.8A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.20%Jul 17, 2025
- High7.8A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier.Check if you run itEPSS 0.21%Jul 17, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01.Check if you run itEPSS 4.34%Jul 16, 2025
- High8.7VoidBot Open-Source is a customizable Discord bot.Check this weekEPSS 38.00%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 74.50%Jul 16, 2025
- High8.1Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.36%Jul 15, 2025
- Critical9.3A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configurCheck if you run itEPSS 1.93%Jul 15, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- Critical9.3Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.01%Jul 14, 2025
- Medium6.9A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security rCheck this weekEPSS 30.00%Jul 11, 2025
- High8.7A vulnerability was found in Tenda O3V2 1.0.0.12(3880).Check this weekEPSS 96.00%Jul 11, 2025
- High7.2The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH checksum for packet creation.Check if you run itEPSS 0.63%Jul 10, 2025
- High8.7Tenda o3_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 0.96%Jul 10, 2025
- Critical9.3An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint.Check if you run itEPSS 6.22%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption isCheck if you run itEPSS 1.64%Jul 10, 2025
- Medium6.9Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user inputCheck this weekEPSS 36.00%Jul 10, 2025