Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to proper…Check if you run itEPSS 0.18%Apr 27, 2026
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated a…Check if you run itEPSS 0.54%Apr 27, 2026
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level p…Check if you run itEPSS 0.30%Apr 27, 2026
- High8.7ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload…Check if you run itEPSS 1.08%Apr 27, 2026
- Critical9.3ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenat…Check if you run itEPSS 0.56%Apr 27, 2026
- Critical9.8A remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl autocoder commit 79d02a allows attackers to execute arbitrary code via provi…Check if you run itEPSS 0.52%Apr 27, 2026
- High7.5A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path c…Check if you run itEPSS 0.45%Apr 27, 2026
- Low2.0A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting…Check if you run itEPSS 0.19%Apr 27, 2026
- Low2.0A vulnerability was determined in code-projects Online Lot Reservation System 1.0.Check if you run itEPSS 0.22%Apr 27, 2026
- Medium5.5A vulnerability was found in code-projects Online Lot Reservation System up to 1.0.Check if you run itEPSS 0.44%Apr 27, 2026
- Medium5.5A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- Medium5.3pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names.Check if you run itEPSS 0.14%Apr 27, 2026
- High8.2SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initia…Check if you run itEPSS 0.15%Apr 27, 2026
- High7.5An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Check if you run itEPSS 0.37%Apr 27, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.35%Apr 27, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.81%Apr 27, 2026
- Medium5.5A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- Low2.1A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Apr 27, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- Medium5.5A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- Medium5.5A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- High7.3Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1Check if you run itEPSS 0.26%Apr 27, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Check if you run itEPSS 0.29%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.19%Apr 27, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.Check if you run itEPSS 0.55%Apr 27, 2026
Sort