Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3ACM/MCE assisted-service writes raw referenced pull-secret contents into when pull-secret validation fails.Check if you run itEPSS 0.18%May 29, 2026
- Medium5.1XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupt…Check if you run itEPSS 0.13%May 29, 2026
- High8.7A vulnerability has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- Medium6.9A flaw has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.28%May 29, 2026
- High8.7A vulnerability was detected in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- High8.7A security vulnerability has been detected in Shibby Tomato up to 1.28.Check if you run itEPSS 0.44%May 29, 2026
- High8.7A weakness has been identified in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- Low2.1A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.40%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- Medium6.9PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms.Check if you run itEPSS 0.16%May 29, 2026
- High8.7Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing…Check if you run itEPSS 0.31%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
- High7.1Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequences in th…Check if you run itEPSS 0.56%May 29, 2026
- High7.1MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis…Check if you run itEPSS 0.27%May 29, 2026
- High8.7HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to delete arbitrary records by sending a crafted reque…Check if you run itEPSS 0.33%May 29, 2026
- High8.8HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST…Check if you run itEPSS 0.33%May 29, 2026
- High8.8HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'nama_kelom…Check if you run itEPSS 0.33%May 29, 2026
- High8.7HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by bypassing file type validation.Check if you run itEPSS 0.52%May 29, 2026
Sort