Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations.Check if you run itEPSS 1.42%Jun 17, 2025
- High8.2Conda-build contains commands and tools to build conda packages.Check if you run itEPSS 0.83%Jun 16, 2025
- Critical9.8Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application.Check this weekEPSS 74.00%Jun 16, 2025
- Critical9.8Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.Check this weekEPSS 53.00%Jun 16, 2025
- Medium4.7IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.1Check if you run itEPSS 0.36%Jun 15, 2025
- High8.5IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualCheck if you run itEPSS 0.60%Jun 14, 2025
- High7.5The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_Check if you run itEPSS 0.30%Jun 13, 2025
- High7.8A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.Check if you run itEPSS 0.13%Jun 11, 2025
- Critical9.8Certain canvas operations could have lead to memory corruption.Check if you run itEPSS 0.66%Jun 11, 2025
- UnknownZoho firewall_analyzer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 99.29%Jun 11, 2025
- High7.8The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which isCheck if you run itEPSS 0.14%Jun 10, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 0.23%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and sCheck if you run itEPSS 0.59%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password ofCheck if you run itEPSS 0.59%Jun 10, 2025
- Medium4.6An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted uCheck if you run itEPSS 0.33%Jun 10, 2025
- Medium4.9matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.Check if you run itEPSS 0.37%Jun 10, 2025
- High8.8A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 1.07%Jun 10, 2025
- Medium5.8Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through anCheck if you run itEPSS 0.31%Jun 10, 2025
- High7.5Keyoti SearchUnit prior to 9.0.0.Check if you run itEPSS 0.39%Jun 10, 2025
- Medium6.3FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents.Check if you run itEPSS 0.45%Jun 9, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CANCheck if you run itEPSS 0.27%Jun 8, 2025
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 89.33%Jun 7, 2025
- High7.2Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.78%Jun 6, 2025
- High8.7A command injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.97%Jun 6, 2025