Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A flaw has been found in SourceCodester Survey Application System 1.0.Check if you run itEPSS 0.48%Nov 10, 2025
- Critical9.3New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain adminisCheck if you run itEPSS 0.55%Nov 10, 2025
- High8.6EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbiCheck if you run itEPSS 0.68%Nov 10, 2025
- Medium6.9A vulnerability was detected in code-projects Online Job Search Engine 1.0.Check if you run itEPSS 0.48%Nov 10, 2025
- Critical9.3EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' liCheck if you run itEPSS 0.56%Nov 10, 2025
- Medium5.1A security vulnerability has been detected in DedeBIZ up to 6.3.2.Check if you run itEPSS 0.33%Nov 10, 2025
- High8.7U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete dataCheck if you run itEPSS 0.39%Nov 10, 2025
- High8.7U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete dataCheck if you run itEPSS 0.39%Nov 10, 2025
- Medium5.3A weakness has been identified in SourceCodester Farm Management System 1.0.Check if you run itEPSS 0.34%Nov 10, 2025
- Medium6.9A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.Check if you run itEPSS 0.47%Nov 10, 2025
- Medium5.3A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.Check if you run itEPSS 0.37%Nov 10, 2025
- Medium5.1A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8.Check if you run itEPSS 0.62%Nov 10, 2025
- Medium5.3A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13.Check if you run itEPSS 0.58%Nov 10, 2025
- Medium6.5A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi.Check if you run itEPSS 0.69%Nov 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi.Check if you run itEPSS 0.24%Nov 10, 2025
- Medium4.5Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System.Check if you run itEPSS 0.23%Nov 10, 2025
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to peCheck if you run itEPSS 0.21%Nov 10, 2025
- Medium6.5The send_message.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery (CSRF).Check if you run itEPSS 0.16%Nov 10, 2025
- Medium5.4A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" text input.Check if you run itEPSS 0.25%Nov 10, 2025
- Low3.8An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges toCheck if you run itEPSS 0.48%Nov 10, 2025
- Medium6.5ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability.Check if you run itEPSS 0.30%Nov 10, 2025
- High7.1The patient prescription viewing functionality in his_doc_view_single_patient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability.Check if you run itEPSS 0.24%Nov 10, 2025
- Medium6.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.Check if you run itEPSS 0.41%Nov 10, 2025
Sort