Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1.Check if you run itEPSS 0.30%Nov 3, 2025
- Medium6.1Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.Check if you run itEPSS 0.30%Nov 3, 2025
- Medium6.1Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.Check if you run itEPSS 0.30%Nov 3, 2025
- Medium5.4School Management System PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /login.php via the password parameter.Check if you run itEPSS 0.24%Nov 3, 2025
- Medium4.6Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (XSS) via the Profile Section.Check if you run itEPSS 0.21%Nov 3, 2025
- High7.3Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.Check if you run itEPSS 0.29%Nov 3, 2025
- Medium6.5FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions.Check if you run itEPSS 0.38%Nov 3, 2025
- Medium6.8An issue in Raspberry Pi Imager version 1.9.6 for Windows, affecting its OS customization feature.Check if you run itEPSS 0.17%Nov 3, 2025
- High8.8A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.81%Nov 3, 2025
- High8.7A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflecteCheck if you run itEPSS 0.41%Nov 3, 2025
- High7.5Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers toCheck if you run itEPSS 0.92%Nov 3, 2025
- Medium5.4Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.Check if you run itEPSS 0.25%Nov 3, 2025
- Medium6.5An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.Check if you run itEPSS 0.37%Nov 3, 2025
- Medium6.5NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.Check if you run itEPSS 0.32%Nov 3, 2025
- Medium6.5An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize functionCheck if you run itEPSS 0.44%Nov 3, 2025
- Medium6.9A vulnerability was determined in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- High7.5CGA-xxw4-jppq-2395Open the advisoryNov 2, 2025
- Medium5.3CGA-xxww-qx94-jq34Open the advisoryNov 2, 2025
- High7.7Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 7.47%Nov 2, 2025
- Medium5.1A flaw has been found in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium5.1A vulnerability was detected in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- High8.7A security vulnerability has been detected in Tenda AC23 16.03.07.52.Check if you run itEPSS 1.21%Nov 2, 2025
- High8.7A weakness has been identified in Tenda AC23 16.03.07.52.Check if you run itEPSS 1.10%Nov 2, 2025
Sort