Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownteclib-edition gestionnaire_libre_de_parc_informatique Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.37%Jun 7, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 6.19%Jun 6, 2025
- Medium4.9A flaw was found in Samba.Check if you run itEPSS 0.75%Jun 6, 2025
- Medium6.9A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0.Check if you run itEPSS 0.44%Jun 6, 2025
- Medium6.9A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0.Check if you run itEPSS 0.44%Jun 6, 2025
- Critical9.3A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remotCheck if you run itEPSS 0.51%Jun 6, 2025
- Medium5.3A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424.Check if you run itEPSS 0.38%Jun 5, 2025
- Medium5.0Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassingCheck if you run itEPSS 0.32%Jun 5, 2025
- Critical9.3Improper neutralization of input provided by an unauthorized user into changes__reference_id parameter in URL allows for boolean-based Blind SQL Injection attacks.Check if you run itEPSS 0.32%Jun 5, 2025
- Critical9.3A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical.Check if you run itEPSS 2.49%Jun 5, 2025
- Medium6.0A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operatingCheck if you run itEPSS 0.18%Jun 4, 2025
- High8.8The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inCheck if you run itEPSS 0.56%Jun 4, 2025
- High7.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.Check if you run itEPSS 0.10%Jun 3, 2025
- Medium4.3A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within theCheck if you run itEPSS 0.20%Jun 2, 2025
- Medium4.8Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.14%Jun 2, 2025
- Medium6.5Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information anCheck if you run itEPSS 0.34%Jun 2, 2025
- Medium6.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx.Check if you run itEPSS 0.36%Jun 2, 2025
- Medium6.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session management component.Check if you run itEPSS 0.36%Jun 2, 2025
- Medium6.9Client-side enforcement of server-side security issue exists in wivia 5 all versions.Check this weekEPSS 30.00%May 30, 2025
- High8.1Zitadel is open-source identity infrastructure software.Check this weekEPSS 39.00%May 30, 2025
- Critical9.1Fabio is an HTTP(S) and TCP router for deploying applications managed by consul.Check this weekEPSS 45.00%May 30, 2025
- Medium5.3FreeScout is a free self-hosted help desk and shared mailbox.Check this weekEPSS 39.00%May 29, 2025
- High8.7An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.Check this weekEPSS 63.00%May 29, 2025
- Medium5.4SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint.Check this weekEPSS 24.00%May 28, 2025
- Critical9.4aws-mcp-server MCP server is vulnerable to command injection.Check if you run itEPSS 1.22%May 28, 2025