Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar features.Check if you run itEPSS 0.26%Sep 3, 2025
- UnknownVMware cloud_foundation Deserialization of Untrusted DataPatch nowKEVEPSS 23.31%Sep 3, 2025
- Medium6.9A vulnerability was determined in itsourcecode Student Information Management System 1.0.Check if you run itEPSS 0.42%Sep 2, 2025
- Medium6.9A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 2, 2025
- High8.6E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned.Check if you run itEPSS 0.22%Sep 2, 2025
- Medium6.9E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by defCheck if you run itEPSS 0.36%Sep 2, 2025
- Critical9.3E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password.Check if you run itEPSS 0.54%Sep 2, 2025
- Medium6.9A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 2, 2025
- Low1.8A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20.Check if you run itEPSS 0.16%Sep 2, 2025
- Medium6.5SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint.Check if you run itEPSS 0.36%Sep 2, 2025
- Medium5.3Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with AdministratorCheck if you run itEPSS 0.45%Sep 2, 2025
- Medium6.5Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter.Check if you run itEPSS 1.85%Sep 2, 2025
- Medium6.5Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password.Check if you run itEPSS 3.35%Sep 2, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Medium6.9A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0.Check if you run itEPSS 0.48%Sep 1, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0.Check if you run itEPSS 0.48%Sep 1, 2025
- Medium6.9A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Low1.8A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948).Check if you run itEPSS 0.14%Sep 1, 2025
- Medium5.3A vulnerability was identified in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.45%Sep 1, 2025
- Medium6.9A vulnerability was determined in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.53%Sep 1, 2025
- Medium6.9A vulnerability was found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.60%Sep 1, 2025
- Medium6.9A vulnerability has been found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Medium6.9A flaw has been found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Medium6.9The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privileges to exploit Relative Path Traversal to downloaCheck if you run itEPSS 0.52%Sep 1, 2025
- Medium5.3A vulnerability was found in PHPGurukul User Management System 1.0.Check if you run itEPSS 0.34%Sep 1, 2025
Sort