Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.49%Jul 12, 2025
- Medium6.5IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocoCheck if you run itEPSS 0.31%Jul 12, 2025
- Critical9.8The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upCheck if you run itEPSS 7.99%Jul 12, 2025
- Medium4.9The RSFirewall! plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.1.42 via the get_local_filename() function.Check if you run itEPSS 0.45%Jul 12, 2025
- Critical10.0An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, default credentials.Check if you run itEPSS 0.68%Jul 11, 2025
- Medium5.3A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63.Check if you run itEPSS 0.40%Jul 11, 2025
- High8.2Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.28%Jul 11, 2025
- Medium6.9A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security rCheck if you run itEPSS 0.30%Jul 11, 2025
- High7.1A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to causCheck if you run itEPSS 0.30%Jul 11, 2025
- High7.1An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sendCheck if you run itEPSS 0.33%Jul 11, 2025
- High7.1An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards alloCheck if you run itEPSS 0.31%Jul 11, 2025
- Medium6.0A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a DCheck if you run itEPSS 0.25%Jul 11, 2025
- High7.1An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attaCheck if you run itEPSS 0.32%Jul 11, 2025
- High7.1An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacCheck if you run itEPSS 0.32%Jul 11, 2025
- High8.7A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update withCheck if you run itEPSS 0.52%Jul 11, 2025
- High7.5The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters in the MJ_gmgt_delete_class_limit_for_member, MJ_gmgt_get_yeaCheck if you run itEPSS 0.37%Jul 11, 2025
- Medium6.4The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vuCheck if you run itEPSS 0.22%Jul 11, 2025
- Medium5.1A vulnerability was found in LiveHelperChat lhc-php-resque Extension up to ee1270b35625f552425e32a6a3061cd54b5085c4.Check if you run itEPSS 0.30%Jul 11, 2025
- Medium5.3Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate userCheck if you run itEPSS 0.45%Jul 11, 2025
- Critical10.0aishu anyshare_cloud Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.81%Jul 11, 2025
- High8.5Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.Check if you run itEPSS 0.20%Jul 10, 2025
- Critical9.3Emerson ValveLink Products store sensitive information in cleartext in memory.Check if you run itEPSS 0.39%Jul 10, 2025
- High7.1A vulnerability exists in Advantech iView that allows for argument injection in NetworkServlet.backupDatabase().Check if you run itEPSS 0.33%Jul 10, 2025
- High8.7A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap().Check if you run itEPSS 0.61%Jul 10, 2025
- High8.7A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange().Check if you run itEPSS 0.61%Jul 10, 2025
Sort