Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was detected in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.32%Sep 17, 2025
- Medium5.3A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0.Check if you run itEPSS 0.39%Sep 17, 2025
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing.Check if you run itEPSS 0.26%Sep 17, 2025
- Critical9.8A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in account.Check if you run itEPSS 0.56%Sep 17, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Shopside Software Shopside App allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.24%Sep 17, 2025
- Medium5.3When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log.Check if you run itEPSS 0.25%Sep 17, 2025
- Medium5.3NeuVector stores user passwords and API keys using a simple, unsalted hash.Check if you run itEPSS 0.18%Sep 17, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yordam Informatics Yordam Library Automation System allows SQL Injection.Check if you run itEPSS 0.35%Sep 17, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Rendered UI Layers or Frames vulnerability in Mevzuattr SoftwarCheck if you run itEPSS 0.25%Sep 17, 2025
- Critical9.3A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check.Check if you run itEPSS 0.79%Sep 17, 2025
- Medium5.3The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_modules' function in all versions up to, and inCheck if you run itEPSS 0.28%Sep 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HCheck if you run itEPSS 0.20%Sep 17, 2025
- Medium5.1A weakness has been identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.24%Sep 17, 2025
- Medium5.3A security flaw has been discovered in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Sep 17, 2025
- Critical9.3An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans.Check if you run itEPSS 1.48%Sep 17, 2025
- Critical9.3An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files securiCheck if you run itEPSS 0.85%Sep 17, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.24%Sep 17, 2025
- High8.3In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 code executCheck if you run itEPSS 0.48%Sep 17, 2025
- High7.7In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on WindowsCheck if you run itEPSS 0.83%Sep 17, 2025
- Medium5.5In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive uploadCheck this weekEPSS 15.46%Sep 17, 2025
- Medium4.2In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race conditionCheck if you run itEPSS 0.42%Sep 17, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc.Check if you run itEPSS 0.24%Sep 17, 2025
- Critical9.3Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitraCheck if you run itEPSS 2.19%Sep 17, 2025
- Critical9.3Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate thCheck if you run itEPSS 0.83%Sep 17, 2025
- Medium6.4The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocksy_newsletter_subscribe shortcode in all versions up to, and includingCheck if you run itEPSS 0.25%Sep 17, 2025
Sort