Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.6The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking.Check if you run itEPSS 0.17%Mar 31, 2026
- High7.1baserCMS is a website development framework.Check if you run itEPSS 0.27%Mar 31, 2026
- Medium6.9baserCMS is a website development framework.Check if you run itEPSS 0.24%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 1.07%Mar 31, 2026
- Medium5.3baserCMS is a website development framework.Check if you run itEPSS 0.40%Mar 31, 2026
- Critical9.1baserCMS is a website development framework.Check if you run itEPSS 1.54%Mar 31, 2026
- Critical9.2baserCMS is a website development framework.Check if you run itEPSS 2.07%Mar 31, 2026
- Medium6.9baserCMS is a website development framework.Check if you run itEPSS 0.43%Mar 31, 2026
- Critical9.1baserCMS is a website development framework.Check if you run itEPSS 2.32%Mar 31, 2026
- High8.7baserCMS is a website development framework.Check if you run itEPSS 0.59%Mar 31, 2026
- Low2.1Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via differeCheck if you run itEPSS 0.19%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 13.74%Mar 31, 2026
- High7.5The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4.Patch nowKEVEPSS 73.80%Mar 31, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.Check if you run itEPSS 0.33%Mar 31, 2026
- Medium5.4A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0.Check if you run itEPSS 0.23%Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.25%Mar 31, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.72%Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.72%Mar 31, 2026
- Critical9.8In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands.Check if you run itEPSS 0.53%Mar 31, 2026
- High7.8InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective.Check if you run itEPSS 0.31%Mar 31, 2026
- High8.4An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading toCheck if you run itEPSS 0.24%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in Funambol, Inc.Check if you run itEPSS 0.67%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arCheck if you run itEPSS 0.64%Mar 31, 2026
- High8.6An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrarCheck if you run itEPSS 0.21%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in PEAKSEL D.O.O.Check if you run itEPSS 0.53%Mar 31, 2026
Sort