Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injectinCheck if you run itEPSS 0.29%Sep 29, 2025
- Medium6.5Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 andCheck if you run itEPSS 0.21%Sep 29, 2025
- High7.3A stored cross-site scripting (XSS) vulnerability exists in the MyCourts v3 application within the LTA number profile field.Check if you run itEPSS 0.27%Sep 29, 2025
- Medium6.0In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature.Check if you run itEPSS 0.17%Sep 29, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer inCheck if you run itEPSS 0.23%Sep 29, 2025
- Critical9.0Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality.Check if you run itEPSS 0.37%Sep 29, 2025
- High8.2A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0.Check if you run itEPSS 0.38%Sep 29, 2025
- High7.5AT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability.Check if you run itEPSS 0.34%Sep 29, 2025
- High7.5Openindiana, kernel SunOS 5.11 has a denial of service vulnerability.Check if you run itEPSS 0.34%Sep 29, 2025
- Low3.5The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows.Check if you run itEPSS 0.31%Sep 29, 2025
- High7.5An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17.Check if you run itEPSS 0.42%Sep 29, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- High7.5An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly sending crafted TCP packets.Check if you run itEPSS 0.31%Sep 29, 2025
- Medium5.3A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a.Check if you run itEPSS 0.35%Sep 28, 2025
- Medium5.1A vulnerability has been found in code-projects Project Monitoring System 1.0.Check if you run itEPSS 0.29%Sep 28, 2025
- High8.7A flaw has been found in Tenda AC18 15.03.05.19.Check if you run itEPSS 0.82%Sep 28, 2025
- High8.7A vulnerability was detected in Tenda AC18 15.03.05.19.Check if you run itEPSS 0.82%Sep 28, 2025
- Medium5.3A security vulnerability has been detected in Tenda AC18 15.03.05.19.Check if you run itEPSS 3.74%Sep 28, 2025
- High8.7A weakness has been identified in Tenda AC8 16.03.34.06.Check if you run itEPSS 3.85%Sep 28, 2025
- Medium5.3A security flaw has been discovered in itsourcecode Hostel Management System 1.0.Check if you run itEPSS 0.40%Sep 28, 2025
- Medium6.9A vulnerability was identified in CodeAstro Student Grading System 1.0.Check if you run itEPSS 0.48%Sep 28, 2025
- High8.7A vulnerability was determined in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.82%Sep 28, 2025
- Medium6.9A vulnerability was found in code-projects Simple Scheduling System 1.0.Check if you run itEPSS 0.48%Sep 28, 2025
- Medium6.9A vulnerability has been found in code-projects Simple Scheduling System 1.0.Check if you run itEPSS 0.48%Sep 28, 2025
- Medium5.3A flaw has been found in CodeAstro Online Leave Application 1.0.Check if you run itEPSS 0.39%Sep 28, 2025
Sort