Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allowsCheck if you run itEPSS 0.19%Jan 9, 2026
- Critical9.8EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection.Check this weekEPSS 27.06%Jan 9, 2026
- Critical9.8A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07.Check if you run itEPSS 9.75%Jan 9, 2026
- Medium6.5Area9 Rhapsode 1.47.3 allows SQL Injection via multiple API endpoints accessible to authenticated users.Check if you run itEPSS 0.29%Jan 9, 2026
- Medium6.5In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the server filesystem.Check if you run itEPSS 0.36%Jan 9, 2026
- Medium5.4In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Authorization Bypass vulnerabilities exists which allow a low privileged user to download password hashes of other user, access woCheck if you run itEPSS 0.22%Jan 9, 2026
- Medium5.4In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple SQL injection vulnerabilities exists which allow a low privileged and administrative user to access the database and its content.Check if you run itEPSS 0.21%Jan 9, 2026
- Medium5.4In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged user to extract passwords of other users andCheck if you run itEPSS 0.22%Jan 9, 2026
- Medium5.3An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via the application stores password hashes in MD5 formatCheck if you run itEPSS 0.35%Jan 9, 2026
- Medium6.5An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP requestCheck if you run itEPSS 0.31%Jan 9, 2026
- High7.5An issue in Hero Motocorp Vida V1 Pro 2.0.7 allows a local attacker to cause a denial of service via the BLE componentCheck if you run itEPSS 0.50%Jan 9, 2026
- High8.2A vulnerability exists in Intelbras CFTV IP NVD 9032 R Ftd V2.800.00IB00C.0.T, which allows an unauthenticated attacker to bypass the multi-factor authentication (MFA) mechanism duCheck if you run itEPSS 0.37%Jan 9, 2026
- Medium6.5** Disputed ** An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back.Check if you run itEPSS 6.12%Jan 9, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.54%Jan 9, 2026
- Medium6.5A DLL hijacking vulnerability in Axtion ODISSAAS ODIS v1.8.4 allows attackers to execute arbitrary code via a crafted DLL file.Check if you run itEPSS 0.24%Jan 9, 2026
- Medium6.5A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack.Check if you run itEPSS 0.41%Jan 9, 2026
- High7.5fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.Check if you run itEPSS 0.46%Jan 9, 2026
- Medium6.5SQL injection vulnerability in pss.sale.com 1.0 via the id parameter to the userfiles/php/cancel_order.php endpoint.Check if you run itEPSS 0.24%Jan 9, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Jan 9, 2026
- Low2.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Monaco Skin allows Cross-Site ScriCheck if you run itEPSS 0.37%Jan 8, 2026
- Low2.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-SiCheck if you run itEPSS 0.19%Jan 8, 2026
- Medium5.3A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1.Check if you run itEPSS 0.39%Jan 8, 2026
- Medium5.3A vulnerability was found in D-Link DI-8200G 17.12.20A1.Check this weekEPSS 11.65%Jan 8, 2026
- Medium6.9A vulnerability has been found in TOTOLINK WA1200 5.9c.2914.Check if you run itEPSS 0.71%Jan 8, 2026
- Medium4.8A flaw has been found in PHPGurukul Staff Leave Management System 1.0.Check if you run itEPSS 0.28%Jan 8, 2026
Sort