Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.6An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.Check if you run itEPSS 0.10%Mar 2, 2026
- Medium6.1A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary…Check if you run itEPSS 0.46%Mar 2, 2026
- High7.5In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartex…Check if you run itEPSS 0.29%Mar 2, 2026
- High8.3Chamilo is a learning management system.Check if you run itEPSS 0.43%Mar 2, 2026
- High8.8Chamilo is a learning management system.Check if you run itEPSS 0.67%Mar 2, 2026
- High7.0Chamilo is a learning management system.Check if you run itEPSS 0.62%Mar 2, 2026
- High8.8Chamilo is a learning management system.Check if you run itEPSS 0.67%Mar 2, 2026
- High7.2Chamilo is a learning management system.Check if you run itEPSS 0.83%Mar 2, 2026
- High7.0Chamilo is a learning management system.Check if you run itEPSS 0.82%Mar 2, 2026
- Critical9.8Chamilo is a learning management system.Check if you run itEPSS 1.00%Mar 2, 2026
- Medium4.8Chamilo is a learning management system.Check if you run itEPSS 0.35%Mar 2, 2026
- Medium5.3Chamilo is a learning management system.Check if you run itEPSS 0.38%Mar 2, 2026
- High8.7Chamilo is a learning management system.Check if you run itEPSS 1.05%Mar 2, 2026
- Medium4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.Check if you run itEPSS 0.32%Mar 2, 2026
- Medium4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=.Check if you run itEPSS 0.32%Mar 2, 2026
- Medium4.6Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to…Check if you run itEPSS 0.16%Mar 2, 2026
- Critical9.3On SimStudio version below to 0.5.74, the endpoint contains a code path that bypasses all authorization checks when provided with and parameters.Check if you run itEPSS 0.34%Mar 2, 2026
- Critical9.8On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions.Check if you run itEPSS 0.40%Mar 2, 2026
- Critical9.3DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remot…Check if you run itEPSS 0.62%Mar 2, 2026
- Critical9.3A Blind SQL injection vulnerability has been identified in DobryCMS.Check if you run itEPSS 0.51%Mar 2, 2026
- Medium5.3The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching…Check if you run itEPSS 0.21%Mar 2, 2026
- Medium5.3The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protection…Check if you run itEPSS 0.20%Mar 2, 2026
- High7.1The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.Check if you run itEPSS 0.24%Mar 2, 2026
- Medium6.9In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.Check if you run itEPSS 0.21%Mar 2, 2026
- Critical9.4In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-bin/CliniNET.prd/utils/userlogstat2.pl", and "/…Check if you run itEPSS 0.59%Mar 2, 2026
Sort