Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affectsCheck if you run itEPSS 0.34%Jan 12, 2026
- Medium6.9Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtainCheck if you run itEPSS 0.31%Jan 12, 2026
- Critical10.0Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is expCheck this weekEPSS 39.91%Jan 12, 2026
- Medium6.9A security flaw has been discovered in code-projects Online Music Site 1.0.Check if you run itEPSS 0.38%Jan 12, 2026
- Medium5.3Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communicationCheck if you run itEPSS 0.22%Jan 12, 2026
- Critical9.8Multiple SQL Injection vulnerabilities exist in amansuryawanshi Gym-Management-System-PHP 1.0 via the 'name', 'email', and 'comment' parameters in (1) submit_contact.php, the 'userCheck if you run itEPSS 0.39%Jan 12, 2026
- Critical9.4Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.php, (2) trainer_search.php, and (3) gym_searCheck if you run itEPSS 0.62%Jan 12, 2026
- Medium5.4Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon fileCheck if you run itEPSS 0.27%Jan 12, 2026
- Critical9.8Sourcecodester Covid-19 Contact Tracing System 1.0 is vulnerable to RCE (Remote Code Execution).Check if you run itEPSS 0.92%Jan 12, 2026
- Medium6.5A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system.Check if you run itEPSS 0.57%Jan 12, 2026
- Medium6.5D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sensor channel.Check if you run itEPSS 0.18%Jan 12, 2026
- Critical9.8D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel.Check if you run itEPSS 0.40%Jan 12, 2026
- Critical10.0A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full accounCheck if you run itEPSS 0.30%Jan 12, 2026
- Critical9.1A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorizeCheck if you run itEPSS 0.41%Jan 12, 2026
- Critical9.8An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe componentCheck if you run itEPSS 0.52%Jan 12, 2026
- High8.8An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanismCheck if you run itEPSS 0.55%Jan 12, 2026
- High8.2An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information via a crafted js fileCheck if you run itEPSS 0.30%Jan 12, 2026
- Critical9.9An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privilegesCheck if you run itEPSS 0.35%Jan 12, 2026
- Critical9.8Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execute arbitrary code by sending a crafted HTTPCheck if you run itEPSS 0.98%Jan 12, 2026
- High8.2Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userIdCheck if you run itEPSS 0.24%Jan 12, 2026
- Medium5.4A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.Check if you run itEPSS 0.15%Jan 12, 2026
- Medium6.9A vulnerability was identified in code-projects Online Music Site 1.0.Check if you run itEPSS 0.38%Jan 11, 2026
- Medium5.1A vulnerability was determined in code-projects Intern Membership Management System 1.0.Check if you run itEPSS 0.36%Jan 11, 2026
- High8.1Apache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 50.42%Jan 11, 2026
- Medium4.8A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0.Check if you run itEPSS 0.18%Jan 11, 2026
Sort