Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters.Check if you run itEPSS 0.42%Oct 7, 2025
- Medium6.0A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter.Check if you run itEPSS 0.24%Oct 7, 2025
- High7.7A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter.Check if you run itEPSS 0.27%Oct 7, 2025
- Medium6.0A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.Check if you run itEPSS 0.24%Oct 7, 2025
- High7.2An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges.Check if you run itEPSS 0.27%Oct 7, 2025
- Medium5.8A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter.Check if you run itEPSS 0.23%Oct 7, 2025
- Medium5.3Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure (BBMRI-ERIC).Check if you run itEPSS 0.27%Oct 7, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure (BBMRI-ERIC), consisting of a stored XSS due to a lCheck if you run itEPSS 0.36%Oct 7, 2025
- Medium5.3A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0.Check if you run itEPSS 0.36%Oct 7, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQCheck if you run itEPSS 0.35%Oct 7, 2025
- High8.7A security flaw has been discovered in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.82%Oct 7, 2025
- High8.7A vulnerability was identified in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.82%Oct 7, 2025
- High8.7A vulnerability was determined in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.82%Oct 7, 2025
- High8.7A vulnerability was found in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.85%Oct 7, 2025
- High8.7A vulnerability has been found in Tenda AC20 up to 16.03.08.12.Check if you run itEPSS 0.82%Oct 7, 2025
- Medium5.3A vulnerability was detected in jakowenko double-take up to 1.13.1.Check if you run itEPSS 0.35%Oct 7, 2025
- Medium5.3A security vulnerability has been detected in code-projects Simple Banking System 1.0.Check if you run itEPSS 0.34%Oct 7, 2025
- Medium5.3The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.05 via the WF_Licensing::log() method when debugging is enCheck if you run itEPSS 0.31%Oct 7, 2025
- Medium5.3A weakness has been identified in code-projects Simple Banking System 1.0.Check if you run itEPSS 0.34%Oct 7, 2025
- Medium5.3A security flaw has been discovered in code-projects Simple Banking System 1.0.Check if you run itEPSS 0.34%Oct 7, 2025
- Medium6.4The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including,Check if you run itEPSS 0.20%Oct 7, 2025
- High8.7A vulnerability was found in Tenda AC23 up to 16.03.07.52.Check if you run itEPSS 0.82%Oct 7, 2025
- High8.7A vulnerability has been found in UTT 1250GW up to v2v3.2.2-200710.Check if you run itEPSS 0.85%Oct 7, 2025
- Medium5.3A flaw has been found in code-projects Online Hotel Reservation System 1.0.Check if you run itEPSS 0.40%Oct 7, 2025
- High8.6The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthCheck if you run itEPSS 4.40%Oct 7, 2025
Sort