Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7Part-DB is an open source inventory management system for electronic components.Check if you run itEPSS 0.37%Aug 13, 2025
- Critical10.0Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script.Check if you run itEPSS 2.30%Aug 13, 2025
- Medium6.9A vulnerability has been found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.43%Aug 13, 2025
- Medium6.9A vulnerability was found in code-projects Job Diary 1.0.Check if you run itEPSS 0.46%Aug 13, 2025
- Medium4.8An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanniCheck if you run itEPSS 0.18%Aug 13, 2025
- Medium6.5The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the set_timesetting action with the ntpserver0 parameter,Check if you run itEPSS 7.27%Aug 13, 2025
- High7.5KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin creCheck if you run itEPSS 0.46%Aug 13, 2025
- Medium6.8An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all vCheck if you run itEPSS 0.64%Aug 12, 2025
- Critical9.1Kanboard is project management software that focuses on the Kanban methodology.Check if you run itEPSS 0.94%Aug 12, 2025
- Medium4.9XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.Check if you run itEPSS 0.68%Aug 12, 2025
- Medium6.5Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accountsCheck if you run itEPSS 0.83%Aug 12, 2025
- High7.2Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code executionCheck if you run itEPSS 1.26%Aug 12, 2025
- High7.2SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries.Check if you run itEPSS 1.13%Aug 12, 2025
- Medium4.8A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3).Check if you run itEPSS 0.12%Aug 12, 2025
- Medium5.6SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key.Check if you run itEPSS 0.19%Aug 12, 2025
- High7.8A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain administrative access.Check if you run itEPSS 0.13%Aug 12, 2025
- Medium4.8The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'download_csv_players' and 'download_csv_games'Check if you run itEPSS 0.31%Aug 12, 2025
- Medium4.9The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::import() function due to insufficient coCheck if you run itEPSS 0.55%Aug 12, 2025
- Critical9.8The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all veCheck if you run itEPSS 0.50%Aug 12, 2025
- High8.8Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.�As a result ,Check if you run itEPSS 0.49%Aug 12, 2025
- Low3.5SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link ( ) elements.Check if you run itEPSS 0.21%Aug 12, 2025
- Medium5.4The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated userCheck if you run itEPSS 0.20%Aug 12, 2025
- Medium4.1The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to reaCheck if you run itEPSS 0.13%Aug 12, 2025
- UnknownApache Superset Deserialization of Untrusted DataPatch nowKEVEPSS 35.45%Aug 12, 2025
- UnknownIBM data_risk_manager Use of Hard-coded CredentialsPatch nowKEVEPSS 71.95%Aug 12, 2025
Sort