Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with AdministratorCheck if you run itEPSS 0.45%Sep 2, 2025
- Medium5.3An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.Check if you run itEPSS 0.28%Sep 2, 2025
- High7.5The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address thaCheck if you run itEPSS 0.42%Sep 2, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1.Check if you run itEPSS 0.25%Sep 2, 2025
- Medium6.5Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter.Check if you run itEPSS 1.85%Sep 2, 2025
- Medium6.5Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter.Check if you run itEPSS 1.08%Sep 2, 2025
- Medium6.5Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker.Check if you run itEPSS 0.25%Sep 2, 2025
- Medium6.5A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the LoginCheck if you run itEPSS 0.36%Sep 2, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W10Check if you run itEPSS 0.22%Sep 2, 2025
- Medium5.3An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows.Check if you run itEPSS 0.25%Sep 2, 2025
- Medium6.1Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via the class parameter.Check if you run itEPSS 0.32%Sep 2, 2025
- Medium6.5Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password.Check if you run itEPSS 3.35%Sep 2, 2025
- Medium5.3A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af.Check if you run itEPSS 0.73%Sep 1, 2025
- Medium5.3A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af.Check if you run itEPSS 0.32%Sep 1, 2025
- Low2.3A security flaw has been discovered in Langfuse up to 3.88.0.Check if you run itEPSS 0.29%Sep 1, 2025
- Medium5.1A vulnerability was found in thinkgem JeeSite up to 5.12.1.Check if you run itEPSS 0.36%Sep 1, 2025
- Medium5.3A vulnerability has been found in xujeff tianti 天梯 up to 2.3.Check if you run itEPSS 0.23%Sep 1, 2025
- Medium6.9A flaw has been found in Campcodes Computer Sales and Inventory System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Sep 1, 2025
- Medium6.8TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path andCheck if you run itEPSS 0.11%Sep 1, 2025
- High8.7A weakness has been identified in Tenda AC20 16.03.08.05.Check if you run itEPSS 0.85%Sep 1, 2025
- High8.4Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a fileCheck if you run itEPSS 0.42%Sep 1, 2025
- Medium6.9A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0.Check if you run itEPSS 0.48%Sep 1, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0.Check if you run itEPSS 0.48%Sep 1, 2025
Sort