Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs.Check if you run itEPSS 0.67%Jun 10, 2025
- High8.1When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used toCheck if you run itEPSS 0.66%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and sCheck if you run itEPSS 0.59%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password ofCheck if you run itEPSS 0.59%Jun 10, 2025
- Medium5.1A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic.Check if you run itEPSS 0.29%Jun 10, 2025
- Medium5.1A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium4.8A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium4.8A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium4.8A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium6.5An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7Check if you run itEPSS 0.85%Jun 10, 2025
- High7.1SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL.Check if you run itEPSS 0.21%Jun 10, 2025
- High7.3A privilege escalation vulnerability may enable a service account to elevate its privileges.Check if you run itEPSS 0.14%Jun 10, 2025
- High7.5An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands.Check if you run itEPSS 1.02%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Critical9.3A SQL injection vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium4.3The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.95.Check if you run itEPSS 0.15%Jun 10, 2025
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0.Check if you run itEPSS 0.53%Jun 10, 2025
- High8.8SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials.Check if you run itEPSS 0.39%Jun 10, 2025
- High7.2The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload.Check if you run itEPSS 0.74%Jun 10, 2025
- High8.7CyberData 011209 Intercom does not properly store or protect web server admin credentials.Check if you run itEPSS 0.42%Jun 9, 2025
- Critical9.1listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 1.58%Jun 9, 2025
- Medium5.1A vulnerability was found in Emlog up to 2.5.7 and classified as problematic.Check if you run itEPSS 0.41%Jun 9, 2025
Sort