Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.Check if you run itEPSS 0.87%Oct 13, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0.Check if you run itEPSS 0.47%Oct 13, 2026
- Medium5.5A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.51%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers.Check if you run itEPSS 0.15%Oct 13, 2026
- High8.6Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy.Check if you run itEPSS 0.19%Oct 13, 2026
- Low3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file .Check if you run itEPSS 0.10%Oct 13, 2026
- Medium5.5A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.26%Oct 13, 2026
- Medium4.3SFTPGo is an open source, event-driven file transfer solution.Check if you run itEPSS 0.22%Oct 13, 2026
- Medium4.3Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized accessCheck if you run itEPSS 0.18%Oct 13, 2026
- Medium5.3Gotify: Insufficiently Protected Password Change endpointCheck if you run itEPSS 0.34%Oct 13, 2026
- Medium6.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks.Check if you run itEPSS 0.23%Oct 13, 2026
- High8.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.33%Oct 13, 2026
- High8.4ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.40%Oct 13, 2026
- High8.6Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist.Check if you run itEPSS 0.39%Oct 13, 2026
- Medium5.3Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because the mail body is fetched by…Check if you run itEPSS 0.20%Oct 13, 2026
- Medium6.0FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential dele…Check if you run itEPSS 0.22%Oct 13, 2026
- High8.81732E ArmorBlock® - Multiple VulnerabilitiesCheck if you run itEPSS 0.27%Oct 13, 2026
- High8.4A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G…Check if you run itEPSS 0.14%Oct 13, 2026
- High7.2The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versio…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.2The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.5A vulnerability was found in SourceCodester Performance Indicator System 1.0.Check if you run itEPSS 0.41%Oct 13, 2026
- Low2.1A vulnerability has been found in code-projects Online Reviewer System 1.0.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…Check if you run itEPSS 0.18%Oct 13, 2026