Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employ…Check if you run itEPSS 0.31%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.Check if you run itEPSS 0.47%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landin…Check if you run itEPSS 0.38%Mar 4, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 1.00%Mar 4, 2026
- Medium5.3Craft is a content management system (CMS).Check if you run itEPSS 0.30%Mar 4, 2026
- High7.1Craft is a content management system (CMS).Check if you run itEPSS 0.48%Mar 4, 2026
- Critical9.8An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write…Check if you run itEPSS 0.68%Mar 4, 2026
- Medium5.32N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating i…Check if you run itEPSS 0.20%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignores the return value of sb_set_…Check if you run itEPSS 0.20%Mar 4, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs_wr…Check if you run itEPSS 0.12%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the "Legacy Form" block.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via…Check if you run itEPSS 0.28%Mar 4, 2026
- High7.2The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and…Check if you run itEPSS 0.33%Mar 4, 2026
- High7.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.41%Mar 3, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.95%Mar 3, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.Check if you run itEPSS 1.05%Mar 3, 2026
- Medium4.3HomeBox is a home inventory and organization system.Check if you run itEPSS 0.29%Mar 3, 2026
- Critical9.8An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a…Check if you run itEPSS 0.36%Mar 3, 2026
- High7.2Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.dep…Check if you run itEPSS 3.83%Mar 3, 2026
- High8.1A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire appl…Check if you run itEPSS 0.19%Mar 3, 2026
- High7.1An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request.Check if you run itEPSS 0.22%Mar 3, 2026
- Low3.7An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Check if you run itEPSS 0.35%Mar 3, 2026
- Critical9.8An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) componentCheck if you run itEPSS 0.52%Mar 3, 2026
- Low1.9Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.Check if you run itEPSS 0.17%Mar 3, 2026
Sort