Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8The credentials required to access the device's web server are sent in base64 within the HTTP headers.Check if you run itEPSS 0.19%Sep 29, 2025
- Medium4.3IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.Check if you run itEPSS 0.24%Sep 29, 2025
- Medium6.4IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.18%Sep 29, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection.Check if you run itEPSS 0.35%Sep 29, 2025
- High8.7A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition.Check if you run itEPSS 0.76%Sep 29, 2025
- Critical9.8chef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 25.95%Sep 29, 2025
- High8.8In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple seCheck if you run itEPSS 0.38%Sep 29, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 29, 2025
- Medium5.1Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.Check if you run itEPSS 0.18%Sep 29, 2025
- Medium5.1Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.Check if you run itEPSS 0.18%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'Check if you run itEPSS 0.19%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'Check if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'Check if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'eCheck if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'nCheck if you run itEPSS 0.24%Sep 29, 2025
- Medium5.3HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'cCheck if you run itEPSS 0.24%Sep 29, 2025
- High8.8Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier.Check if you run itEPSS 0.54%Sep 29, 2025
- Medium4.8The Postie WordPress plugin before 1.9.71 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cro…Check if you run itEPSS 0.18%Sep 29, 2025
- Medium5.1A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919.Check if you run itEPSS 3.77%Sep 29, 2025
- Medium6.9Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.Check if you run itEPSS 0.21%Sep 29, 2025
- Medium6.9A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0.Check if you run itEPSS 0.62%Sep 29, 2025
- Medium5.3A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0.Check if you run itEPSS 0.75%Sep 29, 2025
- Medium5.3A vulnerability was found in mirweiye wenkucms up to 3.4.Check if you run itEPSS 4.20%Sep 29, 2025
- Medium5.1A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0.Check if you run itEPSS 0.26%Sep 29, 2025
- Medium5.1A flaw has been found in YiFang CMS up to 2.0.2.Check if you run itEPSS 0.40%Sep 29, 2025
Sort