Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1SOPlanning is vulnerable to Stored Cross-Site Scripting (XSS) via /process/upload_backup endpoint.Check if you run itEPSS 0.29%Jun 1, 2026
- High8.8SOPlanning does not enforce authorization for backup functionalities.Check if you run itEPSS 0.27%Jun 1, 2026
- High8.5Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.Check if you run itEPSS 0.10%Jun 1, 2026
- High8.5Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier.Check if you run itEPSS 0.10%Jun 1, 2026
- Medium5.5A security vulnerability has been detected in code-projects Smart Parking System 1.0.Check if you run itEPSS 0.63%Jun 1, 2026
- Low2.1A weakness has been identified in itsourcecode Content Management System 1.0.Check if you run itEPSS 0.25%Jun 1, 2026
- Low2.1A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.2.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.2.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.0A vulnerability was found in SourceCodester Water Billing Management System 1.0.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.5A vulnerability has been found in SourceCodester Water Billing Management System 1.0.Check if you run itEPSS 0.37%Jun 1, 2026
- High8.9CRLF injection in default email ruleCheck if you run itEPSS 0.51%Jun 1, 2026
- Medium6.5A bug in the GET REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's…Check if you run itEPSS 0.43%Jun 1, 2026
- High8.8It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname.Check if you run itEPSS 0.18%Jun 1, 2026
- Low2.1A flaw has been found in CodeAstro Ingredients Stock Management System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.0A vulnerability was detected in Mettle sendportal up to 3.0.1.Check if you run itEPSS 0.20%Jun 1, 2026
- Low1.9A security vulnerability has been detected in Assimp up to 6.0.4.Check if you run itEPSS 0.11%Jun 1, 2026
- Low1.9A weakness has been identified in Assimp up to 6.0.4.Check if you run itEPSS 0.11%Jun 1, 2026
- Low1.9A security flaw has been discovered in Assimp up to 6.0.4.Check if you run itEPSS 0.12%Jun 1, 2026
- Low1.9A vulnerability was identified in Assimp up to 6.0.4.Check if you run itEPSS 0.13%Jun 1, 2026
- Low1.9A vulnerability was determined in Assimp up to 6.0.4.Check if you run itEPSS 0.13%Jun 1, 2026
- Low2.0A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.20%Jun 1, 2026
- Critical9.1Apache Airflow's official documentation at ("Passing Parameters when triggering Dags") showed a verbatim example without any quoting / sanitization warning.Check if you run itEPSS 0.38%Jun 1, 2026
- Medium5.5A vulnerability has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.5A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
Sort