Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.8JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.54%Mar 13, 2026
- Medium5.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2.Check if you run itEPSS 0.40%Mar 13, 2026
- Medium6.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missing validation on a user con…Check if you run itEPSS 0.24%Mar 13, 2026
- Medium5.1wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags.Check if you run itEPSS 0.23%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON.Check if you run itEPSS 0.29%Mar 13, 2026
- High7.2IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection.Check if you run itEPSS 0.33%Mar 13, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Check if you run itEPSS 1.03%Mar 12, 2026
- High8.1Postal is an open source SMTP server.Check if you run itEPSS 0.42%Mar 12, 2026
- High7.1Placeto CMS Alpha rv.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'pa…Check if you run itEPSS 0.29%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain adm…Check if you run itEPSS 0.44%Mar 12, 2026
- High8.7Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers t…Check if you run itEPSS 1.13%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain adm…Check if you run itEPSS 0.56%Mar 12, 2026
- High8.8Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database quer…Check if you run itEPSS 0.43%Mar 12, 2026
- Critical9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam…Check if you run itEPSS 1.35%Mar 12, 2026
- High8.6A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may in…Check if you run itEPSS 0.17%Mar 12, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.27%Mar 12, 2026
- Medium5.3A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.39%Mar 12, 2026
- Medium4.3The Reading progressbar WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor…Check if you run itEPSS 0.25%Mar 12, 2026
- Medium5.5A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0.Check if you run itEPSS 0.61%Mar 12, 2026
- Medium5.5A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0.Check if you run itEPSS 0.61%Mar 12, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized email notification triggering due to missing capability checks on all 10 funct…Check if you run itEPSS 0.35%Mar 12, 2026
- Low2.0A vulnerability was detected in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2.Check if you run itEPSS 0.34%Mar 11, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.50%Mar 11, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.65%Mar 11, 2026