Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.Check if you run itEPSS 0.20%Dec 8, 2025
- High7.5Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request.Check if you run itEPSS 0.26%Dec 8, 2025
- Critical9.1NUT-14 allows cashu tokens to be created with a preimage hash.Check if you run itEPSS 0.42%Dec 8, 2025
- High7.2Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, dCheck if you run itEPSS 6.69%Dec 8, 2025
- High8.8Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session.Check if you run itEPSS 0.42%Dec 8, 2025
- Medium6.1Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field wCheck if you run itEPSS 0.22%Dec 8, 2025
- Medium5.4Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.Check if you run itEPSS 0.20%Dec 8, 2025
- Medium4.6A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3.Check if you run itEPSS 0.17%Dec 8, 2025
- Low3.5A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R.Check if you run itEPSS 0.21%Dec 8, 2025
- Critical9.8SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands vCheck if you run itEPSS 0.41%Dec 8, 2025
- Critical9.8HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over theCheck if you run itEPSS 0.49%Dec 8, 2025
- Critical9.1Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.Check if you run itEPSS 0.73%Dec 8, 2025
- Low3.3phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality.Check if you run itEPSS 0.20%Dec 8, 2025
- Medium6.5A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches.Check if you run itEPSS 0.26%Dec 8, 2025
- Medium4.8A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 0.22%Dec 7, 2025
- Medium5.3A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1.Check if you run itEPSS 1.32%Dec 7, 2025
- Medium5.3A flaw has been found in code-projects Question Paper Generator up to 1.0.Check if you run itEPSS 0.35%Dec 7, 2025
- Medium4.8A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.28%Dec 7, 2025
- Medium5.1A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.23%Dec 7, 2025
- Medium5.3A flaw has been found in Verysync 微力同步 up to 2.21.3.Check if you run itEPSS 0.36%Dec 7, 2025
- Medium6.9A vulnerability was detected in Verysync 微力同步 2.21.3.Check if you run itEPSS 0.46%Dec 7, 2025
- Medium6.9A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3.Check if you run itEPSS 0.40%Dec 7, 2025
- High8.7A weakness has been identified in H3C Magic B1 up to 100R004.Check if you run itEPSS 0.53%Dec 7, 2025
- Medium5.3A security flaw has been discovered in code-projects Employee Profile Management System 1.0.Check if you run itEPSS 0.38%Dec 7, 2025
- Medium5.1A vulnerability was identified in code-projects Employee Profile Management System 1.0.Check if you run itEPSS 0.26%Dec 7, 2025
Sort