Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- Medium6.5The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with tCheck if you run itEPSS 0.22%May 21, 2025
- Medium6.2A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files.Check if you run itEPSS 0.22%May 21, 2025
- Medium6.5There are several scripts in the web interface that are accessible via undocumented hard-coded credentials.Check if you run itEPSS 0.35%May 21, 2025
- Medium6.5The devices do not implement any authentication for the web interface or the MQTT server.Check if you run itEPSS 0.45%May 21, 2025
- High7.2The Glossary by WPPedia – Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.0 via deserializatCheck if you run itEPSS 0.74%May 21, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityPatch nowKEVEPSS 93.31%May 21, 2025
- Medium4.8A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0.Check if you run itEPSS 0.44%May 21, 2025
- High8.6The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.37%May 21, 2025
- High7.2A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the MoCheck if you run itEPSS 0.47%May 21, 2025
- High7.2A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager.Check if you run itEPSS 0.59%May 21, 2025
- Critical9.8An issue in D-Link DI-8100 16.07.26A1 allows a remote attacker to bypass administrator login authenticationCheck if you run itEPSS 0.85%May 21, 2025
- Medium4.8A vulnerability classified as problematic has been found in moonlightL hexo-boot 4.3.0.Check if you run itEPSS 0.44%May 20, 2025
- Medium6.9A vulnerability was found in projectworlds Online Time Table Generator 1.0.Check if you run itEPSS 0.56%May 20, 2025
- Medium6.9A vulnerability was found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 20, 2025
- Medium6.9A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical.Check if you run itEPSS 0.56%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core's adminq is protected by the adminq_lockCheck if you run itEPSS 0.19%May 20, 2025
- Critical9.8A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input.Check if you run itEPSS 1.91%May 20, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0.Check if you run itEPSS 0.52%May 19, 2025
- Medium5.3A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0.Check if you run itEPSS 0.53%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Product Notes Tab & Private Admin Notes for WooCommerce product-noteCheck if you run itEPSS 0.27%May 19, 2025
- Medium6.9A vulnerability was found in projectworlds Online Food Ordering System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium5.1A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical.Check if you run itEPSS 0.49%May 19, 2025
- Medium5.1Path traversal vulnerability exists in a-blog cms versions prior to Ver.Check if you run itEPSS 0.49%May 19, 2025
Sort