Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.44%Mar 6, 2026
- Medium5.3Fastify incorrectly accepts malformed headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1(https://httpwg.org/specs/rfc9110.…Check if you run itEPSS 0.51%Mar 6, 2026
- High7.7Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for Activity…Check if you run itEPSS 0.45%Mar 6, 2026
- Medium5.3Cryptomator encrypts data being stored on cloud infrastructure.Check if you run itEPSS 0.21%Mar 6, 2026
- High8.7Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment.Check if you run itEPSS 0.48%Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.56%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.37%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.46%Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.27%Mar 6, 2026
- High7.5Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints.Check if you run itEPSS 0.68%Mar 6, 2026
- High7.5An Absolute Path Traversal vulnerability exists in Navtor NavBox.Check if you run itEPSS 0.73%Mar 6, 2026
- Medium5.3Navtor NavBox allows information disclosure via the /api/ais-data endpoint.Check if you run itEPSS 0.47%Mar 6, 2026
- Medium6.9OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious…Check if you run itEPSS 0.16%Mar 6, 2026
- High8.8PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter.Check if you run itEPSS 0.29%Mar 6, 2026
- High8.8Nominas 0.27 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the use…Check if you run itEPSS 0.32%Mar 6, 2026
- High8.8GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the usern…Check if you run itEPSS 0.29%Mar 6, 2026
- High7.1Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.20%Mar 6, 2026
- Medium6.9Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests.Check if you run itEPSS 0.14%Mar 6, 2026
- High8.8Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu…Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks.Check if you run itEPSS 0.36%Mar 6, 2026
- Medium6.9Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the…Check if you run itEPSS 0.14%Mar 6, 2026
- High8.8Silurus Classifieds Script 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co…Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Gumbo CMS 0.99 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the l…Check if you run itEPSS 0.25%Mar 6, 2026