Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8mjobtime mjobtime Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.14%Dec 1, 2025
- Critical9.8mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features.Check if you run itEPSS 1.73%Dec 1, 2025
- Medium5.5Android Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy.Check if you run itEPSS 0.09%Dec 1, 2025
- High7.5An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack.Check if you run itEPSS 0.34%Dec 1, 2025
- High8.1The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root wheCheck if you run itEPSS 0.55%Dec 1, 2025
- Medium5.3Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.Check if you run itEPSS 0.99%Dec 1, 2025
- Medium6.8Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support.Check if you run itEPSS 0.19%Dec 1, 2025
- Medium5.3A security vulnerability has been detected in deco-cx apps up to 0.120.1.Check if you run itEPSS 0.35%Nov 30, 2025
- Medium5.8A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass.Check if you run itEPSS 0.39%Nov 30, 2025
- Medium4.8A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01.Check if you run itEPSS 0.27%Nov 30, 2025
- Critical9.1By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant compCheck if you run itEPSS 5.48%Nov 30, 2025
- Medium5.3A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e.Check if you run itEPSS 0.35%Nov 30, 2025
- Medium6.9A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97.Check if you run itEPSS 0.50%Nov 30, 2025
- Medium5.3A vulnerability was identified in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.52%Nov 30, 2025
- Medium5.3A vulnerability was determined in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.29%Nov 30, 2025
- Medium5.3A vulnerability was found in ZenTao up to 21.7.6-8564.Check if you run itEPSS 0.32%Nov 30, 2025
- Medium6.9A vulnerability has been found in Chanjet CRM up to 20251106.Check if you run itEPSS 0.44%Nov 30, 2025
- Medium5.3A flaw has been found in ZenTao up to 21.7.6-8564.Check if you run itEPSS 0.41%Nov 30, 2025
- Medium6.9A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.Check if you run itEPSS 0.61%Nov 30, 2025
- Medium5.3A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5.Check if you run itEPSS 0.40%Nov 30, 2025
- Medium4.8A weakness has been identified in yungifez Skuul School Management System up to 2.6.5.Check if you run itEPSS 0.31%Nov 30, 2025
- Medium5.3A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.Check if you run itEPSS 0.34%Nov 30, 2025
- Medium6.9A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.Check if you run itEPSS 0.42%Nov 30, 2025
Sort