Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated admiCheck if you run itEPSS 0.66%Oct 8, 2025
- Medium6.1SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.Check if you run itEPSS 0.24%Oct 8, 2025
- High8.8An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter.Check if you run itEPSS 0.98%Oct 8, 2025
- Medium5.3A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0.Check if you run itEPSS 0.33%Oct 7, 2025
- Medium4.8OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo.Check if you run itEPSS 0.24%Oct 7, 2025
- Medium4.8OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager.Check if you run itEPSS 0.24%Oct 7, 2025
- Medium4.8OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Enterprise Banner image upload field.Check if you run itEPSS 0.24%Oct 7, 2025
- Medium4.8OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template.Check if you run itEPSS 0.24%Oct 7, 2025
- Medium6.9A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Oct 7, 2025
- Medium6.9A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Oct 7, 2025
- Medium5.3A flaw has been found in Campcodes Advanced Online Voting Management System 1.0.Check if you run itEPSS 0.33%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: md: don't dereference mddev after export_rdev() Except for initial reference, mddev->kobject is referenced by rdCheck if you run itEPSS 0.13%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong sizeof config in slave_config Fix broken slave_config function that uncorrectly cCheck if you run itEPSS 0.15%Oct 7, 2025
- High7.2An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges.Check if you run itEPSS 0.27%Oct 7, 2025
- Medium5.3A flaw has been found in code-projects Online Hotel Reservation System 1.0.Check if you run itEPSS 0.40%Oct 7, 2025
- High8.6The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthCheck if you run itEPSS 4.44%Oct 7, 2025
- Medium5.3A vulnerability was detected in code-projects Online Hotel Reservation System 1.0.Check if you run itEPSS 0.33%Oct 7, 2025
- Medium5.3A security vulnerability has been detected in code-projects Online Hotel Reservation System 1.0.Check if you run itEPSS 0.33%Oct 7, 2025
- Medium5.3A weakness has been identified in code-projects Online Hotel Reservation System 1.0.Check if you run itEPSS 0.33%Oct 7, 2025
- Critical9.9Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call.Check this weekEPSS 16.12%Oct 7, 2025
- Medium5.1KUNO CMS is a fully deployable full-stack blog application.Check if you run itEPSS 0.34%Oct 6, 2025
- Medium5.1A weakness has been identified in code-projects Online Course Registration 1.0.Check if you run itEPSS 0.41%Oct 6, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.34%Oct 6, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.97%Oct 6, 2025
- Medium5.3A security flaw has been discovered in CRMEB up to 5.6.Check if you run itEPSS 0.33%Oct 5, 2025
Sort