Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Plesk 18.0 has Incorrect Access Control.Check if you run itEPSS 0.55%Dec 12, 2025
- Low2.7A flaw was found in Keycloak Admin REST (Representational State Transfer) API.Check if you run itEPSS 0.35%Dec 10, 2025
- Medium5.5Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%Dec 9, 2025
- Low2.7An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions,…Check if you run itEPSS 0.21%Dec 9, 2025
- Medium6.5An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR…Check if you run itEPSS 0.26%Dec 9, 2025
- Medium4.3An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated…Open the advisoryDec 9, 2025
- Medium5.4Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users.Open the advisoryDec 8, 2025
- Medium4.3Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.Open the advisoryDec 8, 2025
- Low2.1A flaw has been found in Verysync 微力同步 up to 2.21.3.Check if you run itEPSS 0.36%Dec 7, 2025
- Medium5.5A vulnerability was detected in Verysync 微力同步 2.21.3.Check if you run itEPSS 0.46%Dec 7, 2025
- Low2.1A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0.Open the advisoryDec 5, 2025
- High8.9LaraDashboard is an all-In-one solution to start a Laravel Application.Open the advisoryDec 4, 2025
- Low2.1A vulnerability was identified in ProudMuBai GoFilm 1.0.0/1.0.1.Open the advisoryDec 3, 2025
- Low2.1A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5.Open the advisoryNov 30, 2025
- High8.4OpenObserve is a cloud-native observability platform.Open the advisoryNov 29, 2025
- Low2.1A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2.Open the advisoryNov 16, 2025
- Low2.1A security vulnerability has been detected in Jiusi OA up to 20251102.Open the advisoryNov 16, 2025
- Low2.1A weakness has been identified in Bdtask Flight Booking Software 4.Open the advisoryNov 16, 2025
- Low2.0A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3.Open the advisoryNov 14, 2025
- Medium5.5Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Improper Access Control vulnerability.Open the advisoryNov 13, 2025
- High8.8The issue was addressed by refusing external connections by default.Open the advisoryNov 13, 2025
- High7.5Typebot is an open-source chatbot builder.Open the advisoryNov 13, 2025
- High8.8A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system.Open the advisoryNov 13, 2025
- High7.2Dell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control vulnerability.Open the advisoryNov 12, 2025
- Low2.1A vulnerability was detected in itsourcecode Online Voting System 1.0.Open the advisoryNov 12, 2025