Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.20%Apr 13, 2026
- Medium6.9A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.28%Apr 13, 2026
- Critical9.8Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.Check if you run itEPSS 0.24%Apr 13, 2026
- High7.5Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution.Check if you run itEPSS 1.11%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields.Check if you run itEPSS 0.25%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search.Check if you run itEPSS 0.34%Apr 13, 2026
- Low2.1Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments.Check if you run itEPSS 0.19%Apr 13, 2026
- High8.4Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint.Check if you run itEPSS 0.27%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug.Check if you run itEPSS 0.95%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report.Check if you run itEPSS 0.95%Apr 13, 2026
- High8.6Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload.Check if you run itEPSS 0.44%Apr 13, 2026
- Medium5.3The bson_validate function may return early on specific inputs and incorrectly report success.Check if you run itEPSS 0.19%Apr 13, 2026
- Medium6.9A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Critical9.8In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.Check if you run itEPSS 0.40%Apr 13, 2026
- Critical9.8Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.40%Apr 13, 2026
- High8.0Totara LMS v19.1.5 and before is vulnerable to HTML Injection.Check if you run itEPSS 0.31%Apr 13, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.32%Apr 13, 2026
- Medium4.8A weakness has been identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.31%Apr 13, 2026
- High7.8A vulnerability in the class of the package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of models, even when .Check if you run itEPSS 0.42%Apr 13, 2026
- Medium6.9A security flaw has been discovered in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- High8.8Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Check if you run itEPSS 0.60%Apr 13, 2026
- High7.5Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security mCheck if you run itEPSS 0.45%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.Check if you run itEPSS 0.29%Apr 13, 2026
Sort