Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0A weak authentication vulnerability has been reported to affect QHora.Check if you run itEPSS 0.22%Mar 20, 2026
- Medium5.6An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora.Check if you run itEPSS 0.21%Mar 20, 2026
- High7.3An SQL injection vulnerability has been reported to affect QHora.Check if you run itEPSS 0.22%Mar 20, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.Check if you run itEPSS 0.19%Mar 20, 2026
- High8.1A command injection vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 1.10%Mar 20, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect QVR Pro.Check if you run itEPSS 0.71%Mar 20, 2026
- Medium6.8A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 0.34%Mar 20, 2026
- Medium6.3A command injection vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 1.01%Mar 20, 2026
- Medium5.7A command injection vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 0.48%Mar 20, 2026
- High8.7A vulnerability was detected in Tenda A18 Pro 02.03.02.28.Check if you run itEPSS 0.53%Mar 20, 2026
- High8.6Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile updateCheck if you run itEPSS 0.22%Mar 20, 2026
- Medium5.1Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of usCheck if you run itEPSS 0.17%Mar 20, 2026
- High8.7A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.53%Mar 20, 2026
- High7.1The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.Check if you run itEPSS 0.32%Mar 20, 2026
- Critical9.4OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to sCheck if you run itEPSS 0.58%Mar 20, 2026
- Medium5.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.22%Mar 20, 2026
- Medium5.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.35%Mar 20, 2026
- High8.7A vulnerability was determined in UTT HiPER 1200GW up to 2.5.3-170306.Check if you run itEPSS 0.53%Mar 20, 2026
- High8.7A vulnerability was found in D-Link DIR-513 1.10.Check if you run itEPSS 0.64%Mar 20, 2026
- Medium5.3A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.26%Mar 20, 2026
- Medium6.1The error_description parameter is vulnerable to Reflected XSS.Check if you run itEPSS 0.26%Mar 20, 2026
- Medium5.3An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.Check if you run itEPSS 0.32%Mar 20, 2026
- High8.1Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.Check if you run itEPSS 0.15%Mar 20, 2026
- Medium5.7CGA-xx9w-38ff-jpp8Open the advisoryMar 20, 2026
- High8.6WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.42%Mar 20, 2026
Sort