Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enaCheck if you run itEPSS 0.58%Oct 13, 2025
- Medium6.9SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.Check if you run itEPSS 0.36%Oct 13, 2025
- High8.7A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browseCheck if you run itEPSS 0.20%Oct 13, 2025
- High8.7A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCCheck if you run itEPSS 0.20%Oct 13, 2025
- High8.7A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE RCheck if you run itEPSS 0.20%Oct 13, 2025
- High8.7A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browserCheck if you run itEPSS 0.20%Oct 13, 2025
- High8.6SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the seCheck if you run itEPSS 0.58%Oct 13, 2025
- Critical9.0An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an atCheck if you run itEPSS 0.90%Oct 13, 2025
- Medium6.9Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain usCheck if you run itEPSS 0.36%Oct 13, 2025
- Medium5.3A vulnerability was found in code-projects Automated Voting System 1.0.Check if you run itEPSS 0.42%Oct 13, 2025
- Medium6.9Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain inCheck if you run itEPSS 0.36%Oct 13, 2025
- High7.8Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 1.57%Oct 13, 2025
- High8.4A flaw has been found in Tenda RP3 Pro up to 22.5.7.93.Check if you run itEPSS 0.16%Oct 13, 2025
- High8.7Hardcoded TLS private key and certificate in firmware in Kiloview N30 2.02.246 allows malicious adversary to do a Mann-in-the-middle attack via the networkCheck if you run itEPSS 0.20%Oct 13, 2025
- Critical10.0A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions thatCheck if you run itEPSS 0.24%Oct 13, 2025
- Medium5.1A vulnerability was detected in D-Link DAP-2695 2.00RC131.Check if you run itEPSS 6.81%Oct 13, 2025
- High8.4EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.Check if you run itEPSS 0.29%Oct 13, 2025
- Medium6.9Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege.Check if you run itEPSS 0.30%Oct 13, 2025
- Low2.4Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.Check if you run itEPSS 0.20%Oct 13, 2025
- Medium6.8The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored CrossCheck if you run itEPSS 0.31%Oct 13, 2025
- Medium6.9A security flaw has been discovered in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.48%Oct 13, 2025
- Low3.5HCL Unica MaxAI Workbench is vulnerable to improper input validation.Check if you run itEPSS 0.50%Oct 13, 2025
- Medium6.9A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.Check if you run itEPSS 0.54%Oct 13, 2025
- Medium6.9A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.Check if you run itEPSS 0.46%Oct 13, 2025
- Medium4.3HCL Unica Campaign 12.1.10 is vulnerable to Reflected Cross-Site Scripting (XSS) where an attacker injects malicious script into an HTTP request, which is then reflected unsafely iCheck if you run itEPSS 0.18%Oct 13, 2025
Sort