Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc.Check if you run itEPSS 0.22%Sep 23, 2025
- Medium6.9A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0.Check if you run itEPSS 0.42%Sep 23, 2025
- Medium6.9A flaw has been found in Campcodes Computer Sales and Inventory System 1.0.Check if you run itEPSS 0.42%Sep 23, 2025
- High8.7The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls.Check if you run itEPSS 0.24%Sep 23, 2025
- High8.5An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations.Check if you run itEPSS 0.68%Sep 23, 2025
- Medium6.9A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0.Check if you run itEPSS 0.42%Sep 23, 2025
- Medium5.3A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.39%Sep 23, 2025
- Medium5.3A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1.Check if you run itEPSS 0.35%Sep 23, 2025
- Medium5.3A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.39%Sep 23, 2025
- Medium5.3A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.39%Sep 23, 2025
- Medium4.8A vulnerability was determined in axboe fio up to 3.41.Check if you run itEPSS 0.15%Sep 23, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a craCheck if you run itEPSS 0.22%Sep 23, 2025
- High7.5Free5gc 4.0.1 is vulnerable to Buffer Overflow.Check if you run itEPSS 0.42%Sep 23, 2025
- Medium6.5In Shenzhen C-Data Technology Co.Check if you run itEPSS 0.14%Sep 23, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.Check if you run itEPSS 0.20%Sep 23, 2025
- Medium5.3Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.Check if you run itEPSS 0.16%Sep 23, 2025
- High7.5A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document.Check if you run itEPSS 0.43%Sep 23, 2025
- High7.1Gutenify Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.23%Sep 23, 2025
- Medium6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin_Manager.php file.Check if you run itEPSS 0.38%Sep 23, 2025
- Medium4.8A vulnerability was found in axboe fio up to 3.41.Check if you run itEPSS 0.15%Sep 22, 2025
- Medium5.3A vulnerability has been found in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.36%Sep 22, 2025
- Medium5.3A flaw has been found in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.36%Sep 22, 2025
- Medium6.9In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, andCheck if you run itEPSS 0.35%Sep 22, 2025
- Medium5.3A vulnerability was detected in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.37%Sep 22, 2025
- Medium5.3A security vulnerability has been detected in fuyang_lipengjun platform 1.0.Check if you run itEPSS 0.37%Sep 22, 2025
Sort