Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 10.43%Jun 25, 2025
- High7.5berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpredictable program behCheck if you run itEPSS 0.41%Jun 25, 2025
- High7.5vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, cauCheck if you run itEPSS 0.37%Jun 25, 2025
- Unknownvendure vendure Improper Input ValidationPatch nowKEVEPSS 60.42%Jun 25, 2025
- High7.1SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $Check if you run itEPSS 0.32%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 24, 2025
- Medium5.3A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 24, 2025
- Low1.7RISC Zero is a zero-knowledge verifiable general computing platform, with Ethereum integration.Check if you run itEPSS 0.41%Jun 24, 2025
- Medium5.3Meshtastic-Android is an Android application for the mesh radio software Meshtastic.Check if you run itEPSS 0.26%Jun 24, 2025
- Critical9.7Hikka is a Telegram userbot.Check if you run itEPSS 0.32%Jun 24, 2025
- Medium5.0NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole.Check if you run itEPSS 0.23%Jun 24, 2025
- Medium5.4A flaw was found in the libssh library in versions less than 0.11.2.Check if you run itEPSS 1.84%Jun 24, 2025
- High8.3A flaw was found in Podman.Check if you run itEPSS 0.52%Jun 24, 2025
- High8.6When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding.Check if you run itEPSS 0.35%Jun 24, 2025
- Medium6.5Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an tag.Check if you run itEPSS 0.36%Jun 24, 2025
- Medium4.3An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/priCheck if you run itEPSS 0.31%Jun 24, 2025
- High7.5The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file tyCheck if you run itEPSS 0.53%Jun 24, 2025
- Critical9.3WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function.Check if you run itEPSS 2.16%Jun 24, 2025
- Medium4.8WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI.Check if you run itEPSS 0.22%Jun 24, 2025
- High8.7WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection DiagnoCheck if you run itEPSS 0.97%Jun 24, 2025
- Medium6.5Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system unavailability.Check if you run itEPSS 0.24%Jun 24, 2025
- Medium4.2Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate useCheck if you run itEPSS 0.19%Jun 24, 2025
- Medium5.0Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, poCheck if you run itEPSS 0.47%Jun 24, 2025
- Low2.3A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3.Check if you run itEPSS 0.48%Jun 24, 2025
- Medium6.3A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3.Check if you run itEPSS 0.56%Jun 24, 2025
Sort