Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shellCheck if you run itEPSS 0.52%Jan 5, 2026
- High7.1QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to readCheck if you run itEPSS 0.32%Jan 5, 2026
- Medium5.3A vulnerability was determined in Tenda AC1206 15.03.06.23.Check if you run itEPSS 9.41%Jan 5, 2026
- High7.1QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to readCheck if you run itEPSS 0.32%Jan 5, 2026
- Medium4.8Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input.Check if you run itEPSS 0.33%Jan 5, 2026
- Medium5.3QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specifiedCheck if you run itEPSS 0.35%Jan 5, 2026
- Medium5.3QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specifiedCheck if you run itEPSS 0.35%Jan 5, 2026
- Medium5.1A vulnerability was found in SourceCodester API Key Manager App 1.0.Check if you run itEPSS 0.23%Jan 5, 2026
- High7.1QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packetCheck if you run itEPSS 0.30%Jan 5, 2026
- High8.7A vulnerability has been found in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.93%Jan 5, 2026
- High8.7A flaw has been found in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.88%Jan 5, 2026
- High8.7A vulnerability was detected in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.61%Jan 5, 2026
- Low3.5The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perforCheck if you run itEPSS 0.18%Jan 5, 2026
- High8.6The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users,Check if you run itEPSS 1.67%Jan 5, 2026
- High8.7A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.85%Jan 5, 2026
- Medium6.9A vulnerability was determined in bg5sbk MiniCMS up to 1.8.Check if you run itEPSS 0.57%Jan 5, 2026
- Medium6.9A vulnerability was found in bg5sbk MiniCMS up to 1.8.Check if you run itEPSS 0.57%Jan 5, 2026
- Medium6.9A vulnerability has been found in bg5sbk MiniCMS up to 1.8.Check if you run itEPSS 0.44%Jan 5, 2026
- Medium6.9A flaw has been found in bg5sbk MiniCMS up to 1.8.Check if you run itEPSS 0.69%Jan 5, 2026
- Low2.3A vulnerability was detected in zhanglun lettura up to 0.1.22.Check if you run itEPSS 0.37%Jan 5, 2026
- Medium5.3A security vulnerability has been detected in milvus up to 2.6.7.Check if you run itEPSS 0.35%Jan 5, 2026
- Medium4.8A weakness has been identified in xnx3 wangmarket up to 4.9.Check if you run itEPSS 0.28%Jan 5, 2026
- Medium4.8A security flaw has been discovered in xnx3 wangmarket up to 4.9.Check if you run itEPSS 0.28%Jan 5, 2026
- Medium5.3A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.Check if you run itEPSS 0.28%Jan 5, 2026
- Medium5.3A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0.Check if you run itEPSS 0.75%Jan 5, 2026
Sort