Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.54%Mar 16, 2026
- Low3.8AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.5SiYuan is a personal knowledge management system.Check if you run itEPSS 0.36%Mar 16, 2026
- High8.6OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.Check if you run itEPSS 2.21%Mar 16, 2026
- Medium6.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials wh…Check if you run itEPSS 0.34%Mar 16, 2026
- High8.6Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a spec…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium6.0Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.15%Mar 16, 2026
- Medium6.0Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium6.0Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure o…Check if you run itEPSS 0.11%Mar 16, 2026
- High8.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one fo…Check if you run itEPSS 0.35%Mar 16, 2026
- Medium5.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system c…Check if you run itEPSS 0.29%Mar 16, 2026
- Medium6.9Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages.Check if you run itEPSS 0.16%Mar 16, 2026
- High8.7Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipula…Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.3ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into v…Check if you run itEPSS 0.21%Mar 16, 2026
- High8.8RealtyScript 4.0.2 SQL Injection via u_id and agent ParametersCheck if you run itEPSS 0.43%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.21%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface.Check if you run itEPSS 0.33%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User CreationCheck if you run itEPSS 0.20%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.27%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.19%Mar 15, 2026
- High8.7Qool CMS Multiple Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.37%Mar 15, 2026
- Medium6.9Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduserCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium4.3The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add_menu_item()…Check if you run itEPSS 0.35%Mar 13, 2026
- High7.5NSquared simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 0.52%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Edit…Check if you run itEPSS 0.15%Mar 13, 2026