Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A security vulnerability has been detected in code-projects Student Crud Operation 3.3.Check if you run itEPSS 0.41%Oct 6, 2025
- High7.5The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing.Check if you run itEPSS 0.51%Oct 6, 2025
- Medium5.1A weakness has been identified in code-projects Online Course Registration 1.0.Check if you run itEPSS 0.41%Oct 6, 2025
- Medium6.9A security flaw has been discovered in Jinher OA up to 2.0.Check if you run itEPSS 0.53%Oct 6, 2025
- High7.3IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary coCheck if you run itEPSS 0.33%Oct 6, 2025
- High8.5IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicioCheck if you run itEPSS 0.17%Oct 6, 2025
- Critical9.3IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate theirCheck if you run itEPSS 0.19%Oct 6, 2025
- Medium6.4python-socketio is a Python implementation of the Socket.IO realtime client and server.Check if you run itEPSS 0.48%Oct 6, 2025
- High8.7A flaw has been found in D-Link DI-7100G C1 up to 20250928.Check if you run itEPSS 1.02%Oct 6, 2025
- Critical9.2XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki.Check if you run itEPSS 0.44%Oct 6, 2025
- Medium5.1A weakness has been identified in D-Link DI-7100G C1 up to 20250928.Check if you run itEPSS 4.64%Oct 6, 2025
- Medium6.9A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0.Check if you run itEPSS 0.42%Oct 6, 2025
- Medium5.1A vulnerability was determined in CmsEasy up to 7.7.7.Check if you run itEPSS 0.30%Oct 6, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.34%Oct 6, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc.Check if you run itEPSS 0.24%Oct 6, 2025
- Medium5.5URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc.Check if you run itEPSS 0.17%Oct 6, 2025
- Medium4.3Improper Encoding or Escaping of Output vulnerability in Logo Software Inc.Check if you run itEPSS 0.19%Oct 6, 2025
- Medium6.0Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc.Check if you run itEPSS 0.29%Oct 6, 2025
- High8.7A vulnerability was detected in Tenda AC18 15.03.05.19(6318).Check if you run itEPSS 1.10%Oct 6, 2025
- High8.7A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318).Check if you run itEPSS 1.27%Oct 6, 2025
- High8.7A weakness has been identified in Tenda AC18 15.03.05.19(6318).Check if you run itEPSS 1.27%Oct 6, 2025
- Medium5.3Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.Check if you run itEPSS 0.40%Oct 6, 2025
- Medium6.5A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive inforCheck if you run itEPSS 0.54%Oct 6, 2025
- Medium6.5It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.Check if you run itEPSS 0.54%Oct 6, 2025
- Low2.7When an error occurs in the application a full stacktrace is provided to the user.Check if you run itEPSS 0.36%Oct 6, 2025
Sort