Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.25%Mar 3, 2026
- Low2.0A vulnerability was found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.50%Mar 3, 2026
- Critical9.8OpenSTAManager is an open source management software for technical assistance and invoicing.Check if you run itEPSS 0.67%Mar 3, 2026
- Low2.0A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.50%Mar 3, 2026
- Critical9.8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using th…Check if you run itEPSS 0.18%Mar 3, 2026
- Critical9.8An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Adm…Check if you run itEPSS 0.38%Mar 3, 2026
- High7.2Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.dep…Check if you run itEPSS 3.75%Mar 3, 2026
- High7.2An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to…Check if you run itEPSS 0.36%Mar 3, 2026
- Low2.7Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php.Check if you run itEPSS 0.34%Mar 3, 2026
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via…Check if you run itEPSS 0.70%Mar 3, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Check if you run itEPSS 0.41%Mar 3, 2026
- Critical9.8The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5.Check if you run itEPSS 0.73%Mar 3, 2026
- High7.2The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versi…Check if you run itEPSS 0.67%Mar 3, 2026
- Medium6.5The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and…Check if you run itEPSS 0.33%Mar 3, 2026
- High8.8The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to…Check if you run itEPSS 0.31%Mar 3, 2026
- Critical9.8code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.Check if you run itEPSS 0.52%Mar 2, 2026
- High7.8In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation.Check if you run itEPSS 0.20%Mar 2, 2026
- High8.8The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_A…Check if you run itEPSS 1.06%Mar 2, 2026
- High8.5Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.Check if you run itEPSS 0.31%Mar 2, 2026
- Critical9.8sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.Check if you run itEPSS 0.52%Mar 2, 2026
- Critical9.8sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php.Check if you run itEPSS 0.52%Mar 2, 2026
- High7.2sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php.Check if you run itEPSS 0.74%Mar 2, 2026
- Medium6.0In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve mas…Check if you run itEPSS 0.29%Mar 2, 2026
- Medium5.1Chamilo is a learning management system.Check if you run itEPSS 0.19%Mar 2, 2026