Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.Check if you run itEPSS 0.22%Dec 17, 2025
- Critical9.6An issue was discovered in 25.1.2 before 25.1.5.Check if you run itEPSS 0.26%Dec 17, 2025
- Critical9.9An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.Check if you run itEPSS 0.28%Dec 17, 2025
- High7.3A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0.Check if you run itEPSS 0.20%Dec 17, 2025
- Medium6.2A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_pCheck if you run itEPSS 1.32%Dec 17, 2025
- Medium6.8A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.Check if you run itEPSS 0.19%Dec 17, 2025
- High7.2RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.Check if you run itEPSS 0.92%Dec 17, 2025
- High7.5Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.Check if you run itEPSS 0.82%Dec 17, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.Check if you run itEPSS 0.27%Dec 17, 2025
- Medium5.3RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.Check if you run itEPSS 0.14%Dec 17, 2025
- Critical9.8An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.Check if you run itEPSS 0.50%Dec 17, 2025
- Critical9.9An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHPCheck if you run itEPSS 0.53%Dec 17, 2025
- Medium6.5A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code exeCheck if you run itEPSS 0.38%Dec 17, 2025
- Critical9.8A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code exeCheck if you run itEPSS 0.69%Dec 17, 2025
- High8.8CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically tCheck if you run itEPSS 0.30%Dec 17, 2025
- Medium6.1A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "Check if you run itEPSS 0.26%Dec 17, 2025
- High7.2A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the pCheck if you run itEPSS 0.55%Dec 17, 2025
- High7.2A Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via thCheck if you run itEPSS 0.55%Dec 17, 2025
- Medium6.6The OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware v18_178_221102_ASCII_PRO_1R5_50) uses hard-coded WiFi credentials identical across all devices and doesCheck if you run itEPSS 0.10%Dec 17, 2025
- Medium6.1Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper handling of $_SERVER['PHP_SELF' ] in index.php/sysconfig.inc.php, which allows remote attackCheck if you run itEPSS 0.22%Dec 17, 2025
- High7.1KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowingCheck if you run itEPSS 0.14%Dec 17, 2025
- Low2.8There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then revCheck if you run itEPSS 0.16%Dec 17, 2025
- High7.8An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installatiCheck if you run itEPSS 0.11%Dec 17, 2025
- High7.8The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,Check if you run itEPSS 0.12%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
Sort