Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant compCheck if you run itEPSS 5.29%Nov 30, 2025
- Medium5.3A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e.Check if you run itEPSS 0.32%Nov 30, 2025
- Medium6.9A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97.Check if you run itEPSS 0.46%Nov 30, 2025
- Medium5.3A vulnerability was identified in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.48%Nov 30, 2025
- Medium5.3A vulnerability was determined in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.27%Nov 30, 2025
- Medium5.3A vulnerability was found in ZenTao up to 21.7.6-8564.Check if you run itEPSS 0.30%Nov 30, 2025
- Medium6.9A vulnerability has been found in Chanjet CRM up to 20251106.Check if you run itEPSS 0.40%Nov 30, 2025
- Medium5.3A flaw has been found in ZenTao up to 21.7.6-8564.Check if you run itEPSS 0.38%Nov 30, 2025
- Medium6.9A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.Check if you run itEPSS 0.56%Nov 30, 2025
- Medium5.3A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5.Check if you run itEPSS 0.37%Nov 30, 2025
- Medium4.8A weakness has been identified in yungifez Skuul School Management System up to 2.6.5.Check if you run itEPSS 0.28%Nov 30, 2025
- Medium5.3A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.Check if you run itEPSS 0.32%Nov 30, 2025
- Medium4.2HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job.Check if you run itEPSS 0.10%Nov 30, 2025
- Medium5.0In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.Check if you run itEPSS 0.22%Nov 30, 2025
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.20%Nov 29, 2025
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.19%Nov 29, 2025
- High8.7OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.28%Nov 29, 2025
- High8.7OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.18%Nov 29, 2025
- Critical9.0OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.56%Nov 29, 2025
- High8.4OpenObserve is a cloud-native observability platform.Check if you run itEPSS 0.27%Nov 29, 2025
- Critical9.8fontTools is a library for manipulating fonts, written in Python.Check if you run itEPSS 0.55%Nov 29, 2025
- High7.5CSV formula injection vulnerability in HCL Technologies Ltd.Check if you run itEPSS 0.34%Nov 28, 2025
- Medium5.4Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd.Check if you run itEPSS 0.18%Nov 28, 2025
- Medium6.9The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise theCheck if you run itEPSS 0.34%Nov 27, 2025
- Medium5.4Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures.Check if you run itEPSS 0.25%Nov 26, 2025
Sort