Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js.Check if you run itEPSS 0.51%Mar 23, 2026
- Critical9.1Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPubCheck if you run itEPSS 0.36%Mar 23, 2026
- Medium6.5The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data dueCheck if you run itEPSS 0.18%Mar 23, 2026
- Medium5.3A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 23, 2026
- Medium5.3A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 23, 2026
- Medium5.3A vulnerability was identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 23, 2026
- Low2.1A vulnerability was found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.32%Mar 23, 2026
- Medium5.3A vulnerability was determined in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 23, 2026
- Critical10.0GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system.Check if you run itEPSS 0.29%Mar 23, 2026
- Critical9.3A vulnerability has been found in Tenda A15 15.13.07.13.Check if you run itEPSS 3.84%Mar 23, 2026
- High8.7A flaw has been found in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.71%Mar 23, 2026
- High8.7A vulnerability was detected in Tenda AC21 16.03.08.16.Check if you run itEPSS 0.98%Mar 23, 2026
- Critical9.4Aquasecurity Trivy Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 61.52%Mar 23, 2026
- Medium5.4passwordprotectwp password_protect_wordpress Missing AuthorizationPatch nowKEVEPSS 0.14%Mar 23, 2026
- Medium6.2XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff fileCheck if you run itEPSS 0.17%Mar 23, 2026
- Medium6.2XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file.Check if you run itEPSS 0.17%Mar 23, 2026
- High7.5A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS) via sending a serieCheck if you run itEPSS 0.94%Mar 23, 2026
- High7.5A NULL pointer dereference in the daap_reply_playlists function (src/httpd_daap.c) of owntone-server commit 3d1652d allows attackers to cause a Denial of Service (DoS) via sendingCheck if you run itEPSS 0.36%Mar 23, 2026
- High8.8A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.Check if you run itEPSS 2.66%Mar 23, 2026
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameterCheck if you run itEPSS 0.25%Mar 23, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitraCheck if you run itEPSS 0.20%Mar 23, 2026
- Medium4.8A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary weCheck if you run itEPSS 0.19%Mar 23, 2026
- Medium4.8Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitraCheck if you run itEPSS 0.19%Mar 23, 2026
- Medium4.8A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary webCheck if you run itEPSS 0.19%Mar 23, 2026
- Medium4.8A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary webCheck if you run itEPSS 0.19%Mar 23, 2026
Sort