Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'.Check if you run itEPSS 0.38%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'.Check if you run itEPSS 0.25%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.Check if you run itEPSS 0.25%Mar 16, 2026
- High8.6Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, validCheck if you run itEPSS 0.26%Mar 16, 2026
- Medium5.3A vulnerability was identified in ThingsGateway 12.Check if you run itEPSS 0.41%Mar 16, 2026
- Medium6.9Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/archivos/usuarios/[ID]/[username]/thumb_AAxAA.jpg' (translated as 80x90 andCheck if you run itEPSS 0.30%Mar 16, 2026
- High8.7Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/administracion/admin_usuarios.cgi?filtro_estado=T&wAccion=listado_xlsx&wBusCheck if you run itEPSS 0.29%Mar 16, 2026
- Medium6.9A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0.Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protectingCheck if you run itEPSS 0.37%Mar 16, 2026
- High8.6Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a specific resourceCheck if you run itEPSS 0.19%Mar 16, 2026
- Medium6.9A vulnerability was found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium5.3A vulnerability has been found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium6.9A flaw has been found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.30%Mar 16, 2026
- Medium5.3A vulnerability was detected in LB-LINK BL-WR9000 2.4.9.Check this weekEPSS 14.20%Mar 16, 2026
- High8.7A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9.Check if you run itEPSS 0.76%Mar 16, 2026
- High8.7A weakness has been identified in LB-LINK BL-WR9000 2.4.9.Check if you run itEPSS 0.79%Mar 16, 2026
- Medium4.8A security flaw has been discovered in CMS Made Simple up to 2.2.21.Check if you run itEPSS 0.24%Mar 16, 2026
- High8.4A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium5.5in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.Check if you run itEPSS 0.17%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.18%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.19%Mar 16, 2026
- High7.0in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type.Check if you run itEPSS 0.17%Mar 16, 2026
- Medium6.5in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.5in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.Check if you run itEPSS 0.17%Mar 16, 2026
Sort