Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.81%Nov 3, 2025
- High8.7A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflecteCheck if you run itEPSS 0.41%Nov 3, 2025
- High7.5Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers toCheck if you run itEPSS 0.92%Nov 3, 2025
- Medium5.4Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.Check if you run itEPSS 0.25%Nov 3, 2025
- Medium6.5An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.Check if you run itEPSS 0.37%Nov 3, 2025
- Medium6.5NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.Check if you run itEPSS 0.32%Nov 3, 2025
- Medium6.5An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize functionCheck if you run itEPSS 0.44%Nov 3, 2025
- Medium6.9A vulnerability was determined in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- High7.7Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 7.47%Nov 2, 2025
- Medium5.1A flaw has been found in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium5.1A vulnerability was detected in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- High8.7A security vulnerability has been detected in Tenda AC23 16.03.07.52.Check if you run itEPSS 1.21%Nov 2, 2025
- High8.7A weakness has been identified in Tenda AC23 16.03.07.52.Check if you run itEPSS 1.10%Nov 2, 2025
- Medium5.1A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0.Check if you run itEPSS 0.44%Nov 2, 2025
- Medium5.1A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0.Check if you run itEPSS 0.43%Nov 2, 2025
- Low2.3/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.30%Nov 1, 2025
- Low2.3/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.30%Nov 1, 2025
- Critical10.0Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.34%Nov 1, 2025
- Critical10.0Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.37%Nov 1, 2025
- Critical10.0Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.43%Nov 1, 2025
- High8.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check.Check if you run itEPSS 0.31%Nov 1, 2025
- Medium6.4The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 4.23.0 due to insufficientCheck if you run itEPSS 0.19%Nov 1, 2025
- High8.8The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the pagebuilder widget.Check if you run itEPSS 0.58%Nov 1, 2025
Sort