Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of PrivilegCheck if you run itEPSS 0.33%Nov 14, 2025
- Medium6.5PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.Check if you run itEPSS 0.21%Nov 14, 2025
- Medium6.1PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.Check if you run itEPSS 0.24%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.1Cross Site Scripting vulnerability in Alto CMS v.1.1.13 allows a local attacker to execute arbitrary code via a crafted script.Check if you run itEPSS 0.28%Nov 14, 2025
- High7.5Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.41%Nov 13, 2025
- High8.5A vulnerability was found in Sonarr 4.0.15.2940.Check if you run itEPSS 0.14%Nov 13, 2025
- High8.5A vulnerability has been found in Radarr 5.28.0.10274.Check if you run itEPSS 0.14%Nov 13, 2025
- Critical9.1IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.53%Nov 13, 2025
- Critical10.0IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to impropCheck if you run itEPSS 0.67%Nov 13, 2025
- Critical9.0IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker usingCheck if you run itEPSS 0.32%Nov 13, 2025
- Critical9.8IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls.Check if you run itEPSS 0.54%Nov 13, 2025
- Low2.7Jitsi Meet is an open source video conferencing application.Check if you run itEPSS 0.41%Nov 13, 2025
- Medium6.5grist-core is a spreadsheet hosting server.Check if you run itEPSS 0.24%Nov 13, 2025
- Medium6.8grist-core is a spreadsheet hosting server.Check if you run itEPSS 0.24%Nov 13, 2025
- Medium4.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.35%Nov 13, 2025
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.30%Nov 13, 2025
- High7.5SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.Check if you run itEPSS 0.67%Nov 13, 2025
- Medium5.5Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.26%Nov 13, 2025
- Medium4.6Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.21%Nov 13, 2025
Sort