Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.27%May 23, 2025
- Medium6.1Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes.Check if you run itEPSS 0.28%May 23, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.40%May 22, 2025
- High7.1Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MCheck if you run itEPSS 0.33%May 22, 2025
- Medium4.6Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: throughCheck if you run itEPSS 0.23%May 22, 2025
- High7.0SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: thrCheck if you run itEPSS 0.29%May 22, 2025
- High8.8SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*;Check if you run itEPSS 0.45%May 22, 2025
- Critical9.42nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affecCheck if you run itEPSS 0.39%May 22, 2025
- Medium6.9Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: throughCheck if you run itEPSS 0.36%May 22, 2025
- High8.7Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-EntCheck if you run itEPSS 0.41%May 22, 2025
- Critical9.8An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service.Check if you run itEPSS 0.75%May 22, 2025
- High7.0Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-EntCheck if you run itEPSS 0.36%May 22, 2025
- Medium6.9Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become compromised.This issue affects ASPECT-EnterpCheck if you run itEPSS 0.42%May 22, 2025
- Medium6.9Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-ECheck if you run itEPSS 0.39%May 22, 2025
- High7.0Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-ECheck if you run itEPSS 0.38%May 22, 2025
- High7.1Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NCheck if you run itEPSS 0.39%May 22, 2025
- High7.5Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised.Check if you run itEPSS 0.43%May 22, 2025
- Medium5.9An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue afCheck if you run itEPSS 0.39%May 22, 2025
- High7.5Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised.Check if you run itEPSS 0.74%May 22, 2025
- High7.5SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised.Check if you run itEPSS 0.39%May 22, 2025
- Medium6.0File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.Check if you run itEPSS 0.36%May 22, 2025
- Medium6.0File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: throuCheck if you run itEPSS 0.36%May 22, 2025
- High8.9Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS SerCheck if you run itEPSS 0.58%May 22, 2025
- High7.3System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised.Check if you run itEPSS 0.34%May 22, 2025
- Medium5.9Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromCheck if you run itEPSS 0.31%May 22, 2025
Sort