Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karimmughal Dot html,php,xml etc pages dot-htmlphpxml-etc-pages allows ReflectCheck if you run itEPSS 0.23%May 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows StoCheck if you run itEPSS 0.21%May 16, 2025
- Medium4.3Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security LevelCheck if you run itEPSS 0.24%May 16, 2025
- Medium5.3A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0.Check if you run itEPSS 0.54%May 16, 2025
- Critical9.8BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities.Check if you run itEPSS 0.64%May 16, 2025
- Medium6.9A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.Check if you run itEPSS 0.80%May 16, 2025
- Low2.6Nextcloud Server is a self hosted personal cloud system.Check if you run itEPSS 0.50%May 16, 2025
- Medium4.3Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team.Check if you run itEPSS 0.82%May 16, 2025
- Medium5.3A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical.Check if you run itEPSS 0.66%May 16, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0.Check if you run itEPSS 0.66%May 16, 2025
- Medium6.5A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault.Check if you run itEPSS 0.54%May 16, 2025
- Medium5.0Nextcloud Desktop is the desktop sync client for Nextcloud.Check if you run itEPSS 0.18%May 16, 2025
- Medium4.3Nextcloud Server is a self hosted personal cloud system.Check if you run itEPSS 0.38%May 16, 2025
- Medium6.4Nextcloud Server is a self hosted personal cloud system.Check if you run itEPSS 0.39%May 16, 2025
- Medium5.3A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.Check if you run itEPSS 0.43%May 16, 2025
- Medium4.3Flask-AppBuilder is an application development framework built on top of Flask.Check if you run itEPSS 0.23%May 16, 2025
- High8.7A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling of chunked-encoded HTTP requests.Check if you run itEPSS 0.20%May 16, 2025
- Medium5.3A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.Check if you run itEPSS 0.46%May 16, 2025
- High7.3Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and tCheck if you run itEPSS 0.21%May 16, 2025
- Medium5.3FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.Check if you run itEPSS 0.68%May 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1]Check if you run itEPSS 0.22%May 16, 2025
- Medium5.3A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.Check if you run itEPSS 0.46%May 16, 2025
- High8.7PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms.Check if you run itEPSS 0.83%May 16, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical.Check if you run itEPSS 0.56%May 16, 2025
- Medium5.9An Improper Access Control vulnerability was identified in the file download functionality.Check if you run itEPSS 0.45%May 16, 2025
Sort