Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgtCheck if you run itEPSS 0.28%Aug 26, 2025
- Medium6.5The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell coCheck if you run itEPSS 0.40%Aug 26, 2025
- High7.5Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via the template parameter to index.php.Check if you run itEPSS 0.97%Aug 26, 2025
- High7.5Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.Check if you run itEPSS 0.32%Aug 26, 2025
- High8.8An issue was discovered in Mahara 23.04.8 and 24.04.4.Check if you run itEPSS 0.32%Aug 26, 2025
- Medium5.3An issue was discovered in Mahara 23.04.8 and 24.04.4.Check if you run itEPSS 0.16%Aug 26, 2025
- Medium6.1In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute.Check if you run itEPSS 0.20%Aug 26, 2025
- Critical9.1Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions viCheck if you run itEPSS 0.32%Aug 26, 2025
- Medium6.1Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser systCheck if you run itEPSS 0.20%Aug 26, 2025
- Medium5.1A security vulnerability has been detected in mtons mblog up to 3.5.0.Check if you run itEPSS 0.27%Aug 25, 2025
- Medium6.9A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 25, 2025
- Medium6.9A vulnerability has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.57%Aug 25, 2025
- Medium5.5request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses.Check if you run itEPSS 0.46%Aug 25, 2025
- Medium6.9A flaw has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.57%Aug 25, 2025
- High7.7XGrammar is an open-source library for efficient, flexible, and portable structured generation.Check if you run itEPSS 0.48%Aug 25, 2025
- High8.7The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak.Check if you run itEPSS 0.32%Aug 25, 2025
- High8.7The Scratch Channel is a news website.Check if you run itEPSS 0.32%Aug 25, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.59%Aug 25, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.57%Aug 25, 2025
- High7.5On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS.Check if you run itEPSS 0.42%Aug 25, 2025
- Low3.8On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs.Check if you run itEPSS 0.10%Aug 25, 2025
- Medium5.3A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.47%Aug 25, 2025
- Medium4.8A security flaw has been discovered in oitcode samarium up to 0.9.6.Check if you run itEPSS 0.36%Aug 25, 2025
- Medium5.3A vulnerability was identified in GreenCMS up to 2.3.0603.Check if you run itEPSS 0.36%Aug 25, 2025
- Medium5.1A vulnerability was found in kalcaddle kodbox 1.61.Check if you run itEPSS 0.31%Aug 25, 2025
Sort