Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7An information disclosure vulnerability exists in OneLogin AD Connector versions prior to 6.1.5 via the /api/adc/v4/configuration endpoint.Check if you run itEPSS 0.16%Jul 1, 2025
- Critical10.0A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handling of untrusted input in the /get/image/ endpoint.Check if you run itEPSS 0.80%Jul 1, 2025
- Medium6.9A vulnerability was found in Campcodes Employee Management System 1.0.Check if you run itEPSS 0.61%Jul 1, 2025
- Medium6.9A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical.Check if you run itEPSS 0.49%Jul 1, 2025
- Medium4.8Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulnerability.Check if you run itEPSS 0.26%Jul 1, 2025
- Medium6.5Certificate generation in juju/utils using the cert.NewLeaf function could include private information.Check if you run itEPSS 0.16%Jul 1, 2025
- Critical9.8An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrCheck if you run itEPSS 0.83%Jul 1, 2025
- Medium6.8Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to uCheck if you run itEPSS 0.32%Jul 1, 2025
- Critical9.7Sunshine is a self-hosted game stream host for Moonlight.Check if you run itEPSS 0.24%Jul 1, 2025
- Medium5.4Sunshine is a self-hosted game stream host for Moonlight.Check if you run itEPSS 0.24%Jul 1, 2025
- Critical9.8linjiashop <=0.9 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.46%Jul 1, 2025
- Critical9.1Improper mstatus.SUM bit retention (non-zero) in Open-Source RISC-V Processor commit f517abb violates privileged spec constraints, enabling potential physical memory access attacksCheck if you run itEPSS 0.47%Jul 1, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.51%Jul 1, 2025
- Unknownlive555 streaming_media Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.85%Jul 1, 2025
- Medium6.3A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0.Check if you run itEPSS 1.28%Jun 30, 2025
- Medium6.3A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0.Check if you run itEPSS 2.23%Jun 30, 2025
- Low3.1File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.Check if you run itEPSS 0.39%Jun 30, 2025
- High8.1File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.Check if you run itEPSS 0.64%Jun 30, 2025
- High8.8Dell OpenManage Network Integration, versions prior to 3.8, contains an Authentication Bypass by Capture-replay vulnerability in the RADIUS protocol.Check if you run itEPSS 0.28%Jun 30, 2025
- Medium6.9A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical.Check if you run itEPSS 1.05%Jun 30, 2025
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.45%Jun 30, 2025
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.42%Jun 30, 2025
- Medium4.3Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly validate channel membership when retrieving playbookCheck if you run itEPSS 0.20%Jun 30, 2025
- Medium5.4Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member management permissions when adCheck if you run itEPSS 0.22%Jun 30, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2.Check if you run itEPSS 0.40%Jun 30, 2025
Sort