Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0Not usedCheck if you run itEPSS 0.00%Dec 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Dec 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Dec 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Dec 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Dec 24, 2025
- Medium6.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Dec 24, 2025
- High8.2Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detailCheck if you run itEPSS 0.20%Dec 24, 2025
- High7.1Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detailCheck if you run itEPSS 0.22%Dec 24, 2025
- Medium6.9A flaw has been found in code-projects Student Information System 1.0.Check if you run itEPSS 0.38%Dec 24, 2025
- Medium5.1A vulnerability was detected in code-projects Student Information System 1.0.Check if you run itEPSS 0.26%Dec 24, 2025
- Medium5.3A security vulnerability has been detected in code-projects Student File Management System 1.0.Check if you run itEPSS 0.34%Dec 24, 2025
- Medium6.5An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL.Check if you run itEPSS 0.19%Dec 24, 2025
- Critical9.8tychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.71%Dec 24, 2025
- Medium5.0OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.Check if you run itEPSS 0.20%Dec 24, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payCheck if you run itEPSS 0.27%Dec 24, 2025
- Medium6.5MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.Check if you run itEPSS 0.24%Dec 24, 2025
- Medium6.1MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.Check if you run itEPSS 0.22%Dec 24, 2025
- Medium6.9A vulnerability was identified in code-projects Online Farm System 1.0.Check if you run itEPSS 0.38%Dec 23, 2025
- High7.8httparty is an API tool.Check if you run itEPSS 0.30%Dec 23, 2025
- High8.6LangChain is a framework for building LLM-powered applications.Check if you run itEPSS 0.79%Dec 23, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check if you run itEPSS 0.47%Dec 23, 2025
- Critical9.3LangChain is a framework for building agents and LLM-powered applications.Check this weekEPSS 42.93%Dec 23, 2025
- High7.0FluidSynth is a software synthesizer based on the SoundFont 2 specifications.Check if you run itEPSS 0.21%Dec 23, 2025
- Critical9.4Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.Check if you run itEPSS 3.28%Dec 23, 2025
- Critical9.4Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.Check if you run itEPSS 3.25%Dec 23, 2025
Sort