Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Raytha CMS does not have any brute force protection mechanism implemented.Check if you run itEPSS 0.43%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to User Enumeration in password reset functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.3Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.Check if you run itEPSS 0.28%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.14%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.Check if you run itEPSS 0.25%Mar 16, 2026
- Critical9.8HCL AION is affected by a vulnerability where offering images are not digitally signed.Check if you run itEPSS 0.14%Mar 16, 2026
- High7.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.26%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.18%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.19%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.0in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.6Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a spec…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium6.0Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium6.0Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.12%Mar 16, 2026
- Medium6.0Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure o…Check if you run itEPSS 0.13%Mar 16, 2026
- High8.6"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.Check if you run itEPSS 0.54%Mar 16, 2026
- Medium6.5in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.Check if you run itEPSS 0.18%Mar 16, 2026
- High8.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one fo…Check if you run itEPSS 0.37%Mar 16, 2026
- High7.7Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This iss…Check if you run itEPSS 0.56%Mar 16, 2026
Sort