Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in Xinhu RockOA up to 2.6.9.Check if you run itEPSS 0.28%Aug 29, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 29, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 29, 2025
- Medium6.9A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 29, 2025
- Medium5.5This issue was addressed with improved handling of symlinks.Check if you run itEPSS 0.18%Aug 29, 2025
- High7.8This issue was addressed by removing the vulnerable code.Check if you run itEPSS 0.24%Aug 29, 2025
- Medium5.5An out-of-bounds read was addressed with improved bounds checking.Check if you run itEPSS 0.17%Aug 29, 2025
- Medium4.3The issue was addressed with improved memory handling.Check if you run itEPSS 0.23%Aug 29, 2025
- Low3.3The issue was addressed with improved checks.Check if you run itEPSS 0.13%Aug 29, 2025
- High7.8A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.17%Aug 29, 2025
- Low3.3An out-of-bounds read was addressed with improved bounds checking.Check if you run itEPSS 0.21%Aug 29, 2025
- Medium5.5A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 29, 2025
- Medium5.5A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 29, 2025
- High7.3CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP responsCheck if you run itEPSS 0.48%Aug 29, 2025
- High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityPatch nowKEVEPSS 41.30%Aug 29, 2025
- Medium6.2Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.35%Aug 29, 2025
- High8.4An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic keys.Check if you run itEPSS 0.14%Aug 29, 2025
- High7.5Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request.Check if you run itEPSS 1.19%Aug 29, 2025
- Medium5.4SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module.Check if you run itEPSS 0.27%Aug 29, 2025
- Medium5.4SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality.Check if you run itEPSS 0.27%Aug 29, 2025
- Medium4.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.60%Aug 29, 2025
- Critical9.8SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/java/cn/gson/oasys/mappCheck if you run itEPSS 0.63%Aug 29, 2025
- High8.1Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation.Check if you run itEPSS 0.25%Aug 29, 2025
- High8.1Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., lCheck if you run itEPSS 0.38%Aug 29, 2025
- Critical9.8TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.Check if you run itEPSS 1.06%Aug 29, 2025
Sort