Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface.Check if you run itEPSS 0.20%Mar 23, 2026
- Medium6.9Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key entry mechanism.Check if you run itEPSS 0.18%Mar 23, 2026
- Medium6.9Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface.Check if you run itEPSS 0.20%Mar 23, 2026
- Medium6.9Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface.Check if you run itEPSS 0.18%Mar 23, 2026
- Medium6.1A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables.Check if you run itEPSS 0.18%Mar 23, 2026
- Low2.9A vulnerability was determined in kalcaddle kodbox 1.64.Check if you run itEPSS 0.29%Mar 23, 2026
- Medium6.3A vulnerability was found in HybridAuth up to 3.12.2.Check if you run itEPSS 0.19%Mar 23, 2026
- Low2.1A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7.Check if you run itEPSS 0.23%Mar 23, 2026
- High8.7Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services.Check if you run itEPSS 0.26%Mar 23, 2026
- Critical9.3SQL Injection in Cuantis.Check if you run itEPSS 0.30%Mar 23, 2026
- High7.7Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces.Check if you run itEPSS 0.33%Mar 23, 2026
- Medium6.8Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exCheck if you run itEPSS 0.19%Mar 23, 2026
- High7.2Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other administrativCheck if you run itEPSS 0.12%Mar 23, 2026
- High8.9A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0.Check if you run itEPSS 4.65%Mar 23, 2026
- Low1.3A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Check if you run itEPSS 0.16%Mar 23, 2026
- High7.5An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutraliza…Check if you run itEPSS 0.46%Mar 23, 2026
- Critical9.8Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi…Check if you run itEPSS 0.57%Mar 23, 2026
- High8.7Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined with a static suCheck if you run itEPSS 0.28%Mar 23, 2026
- High8.5Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service.Check if you run itEPSS 0.42%Mar 23, 2026
- High7.1Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensiCheck if you run itEPSS 0.25%Mar 23, 2026
- High7.6PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.28%Mar 23, 2026
- Medium5.3PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.25%Mar 23, 2026
- Low1.3A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Check if you run itEPSS 0.29%Mar 23, 2026
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.43%Mar 23, 2026
- Low1.3A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Check if you run itEPSS 0.32%Mar 23, 2026
Sort