Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1.Check if you run itEPSS 0.31%Jul 18, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0.Check if you run itEPSS 0.50%Jul 17, 2025
- Medium6.8A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface (CLI) in plain text within the command history.Check if you run itEPSS 0.11%Jul 17, 2025
- Medium4.7NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state thatCheck if you run itEPSS 0.15%Jul 17, 2025
- High8.5NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted containeCheck if you run itEPSS 0.90%Jul 17, 2025
- High8.8A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privilegesCheck if you run itEPSS 0.14%Jul 17, 2025
- High7.5A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer isCheck if you run itEPSS 0.14%Jul 17, 2025
- Medium5.57-Zip is a file archiver with a high compression ratio.Check if you run itEPSS 0.71%Jul 17, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- Critical9.8nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin.Check if you run itEPSS 0.38%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- Critical9.3netis-systems netcore_router_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.77%Jul 16, 2025
- High8.3RomM is a self-hosted rom manager and player.Check if you run itEPSS 0.54%Jul 16, 2025
- High7.5If a caching resolver is configured with , and with set to (the only allowable value other than ), and if the resolver, in the process of resolving a query, encounters a CNAME chaiCheck if you run itEPSS 1.03%Jul 16, 2025
- Low1.3The Scratch Channel is a news website that is under development as of time of this writing.Check if you run itEPSS 0.37%Jul 16, 2025
- High8.7VoidBot Open-Source is a customizable Discord bot.Check if you run itEPSS 0.38%Jul 16, 2025
- Critical9.4WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.Check if you run itEPSS 0.56%Jul 16, 2025
- Medium5.3Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an attacker to create a denial of service situation when configured to use GoAnywhere One-Time Password (GOTPCheck if you run itEPSS 0.38%Jul 16, 2025
- Medium6.5Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely.Check if you run itEPSS 0.45%Jul 16, 2025
- Medium5.3Vue I18n is the internationalization plugin for Vue.js.Check if you run itEPSS 0.81%Jul 16, 2025
- Low2.4Icinga DB Web provides a graphical interface for Icinga monitoring.Check if you run itEPSS 0.30%Jul 16, 2025
- High7.3Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely.Check if you run itEPSS 0.39%Jul 16, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Object Injection.This issue affects URL Shortener: from n/a through <= 3.0.7Check if you run itEPSS 0.59%Jul 16, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows SQL Injection.This issueCheck if you run itEPSS 0.43%Jul 16, 2025
Sort