Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system.Check if you run itEPSS 0.26%Dec 2, 2025
- Medium6.4The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all versions up to, andCheck if you run itEPSS 0.25%Dec 2, 2025
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Argus Technology Inc.Check if you run itEPSS 0.33%Dec 2, 2025
- Medium6.9Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions.Check if you run itEPSS 0.23%Dec 2, 2025
- Medium6.9User Enumeration Vulnerability in TCMAN GIM v11 version 20250304.Check if you run itEPSS 0.33%Dec 2, 2025
- Medium6.9User Enumeration Vulnerability in TCMAN GIM v11 version 20250304.Check if you run itEPSS 0.33%Dec 2, 2025
- High8.7SQL injection vulnerability in TCMAN GIM v11 in version 20250304.Check if you run itEPSS 0.31%Dec 2, 2025
- High8.7Unauthorized access vulnerability in TCMAN GIM v11 version 20250304.Check if you run itEPSS 0.27%Dec 2, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia.Check if you run itEPSS 0.20%Dec 2, 2025
- High7.1Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.28%Dec 2, 2025
- High8.5Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.35%Dec 2, 2025
- High8.5Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.Check if you run itEPSS 0.98%Dec 2, 2025
- High8.5Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.40%Dec 2, 2025
- High8.5Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.40%Dec 2, 2025
- High8.5Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.40%Dec 2, 2025
- High8.5Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.62%Dec 2, 2025
- High8.5Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.40%Dec 2, 2025
- High8.6Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.15%Dec 2, 2025
- High8.7Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 0.35%Dec 2, 2025
- Critical9.4Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2.Check if you run itEPSS 1.24%Dec 2, 2025
- Critical10.0Stack-based buffer overflow in Circutor SGE-PLC1000/SGE-PLC50 v0.9.2.Check if you run itEPSS 0.38%Dec 2, 2025
- Medium5.1Directory traversal vulnerability in SOLIDserver IPAM v8.2.3.Check if you run itEPSS 0.58%Dec 2, 2025
- High8.6A Blind SQL injection vulnerability has been identified in QuickCMS.Check if you run itEPSS 0.29%Dec 2, 2025
- Medium4.9The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 1.4.6 due to insufficient escaping on theCheck if you run itEPSS 0.33%Dec 2, 2025
- High7.1In gokey versions <0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM authentication tag of tCheck if you run itEPSS 0.17%Dec 2, 2025
Sort