Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (DoS) condition on the device via multipleCheck if you run itEPSS 0.53%Apr 30, 2025
- Medium5.3A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.46%Apr 30, 2025
- Medium6.9A vulnerability was found in PHPGurukul Student Record System 3.20.Check if you run itEPSS 0.56%Apr 30, 2025
- Medium6.5A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaintext passwords of other users.Check if you run itEPSS 0.30%Apr 30, 2025
- Medium5.0A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system, including web cache pCheck if you run itEPSS 0.27%Apr 30, 2025
- High7.1A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side cCheck if you run itEPSS 0.41%Apr 30, 2025
- Medium5.3A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0.Check if you run itEPSS 0.46%Apr 30, 2025
- Medium5.3A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical.Check if you run itEPSS 0.46%Apr 30, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical.Check if you run itEPSS 0.46%Apr 30, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20.Check if you run itEPSS 0.56%Apr 30, 2025
- Medium6.5The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘subscriptionCouponId’ parameter in all versions up to, and including, 1.7 due to iCheck if you run itEPSS 0.40%Apr 30, 2025
- High7.8Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.Check if you run itEPSS 0.37%Apr 30, 2025
- High7.8Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.Check if you run itEPSS 0.37%Apr 30, 2025
- High7.8Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.Check if you run itEPSS 0.39%Apr 30, 2025
- High7.8Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.Check if you run itEPSS 0.38%Apr 30, 2025
- High7.8Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary coCheck if you run itEPSS 0.43%Apr 30, 2025
- Medium4.9The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to pCheck if you run itEPSS 0.35%Apr 30, 2025
- Medium5.4The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCheck if you run itEPSS 0.27%Apr 30, 2025
- Critical10.0vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 1.79%Apr 30, 2025
- Medium6.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.52%Apr 30, 2025
- High7.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.60%Apr 30, 2025
- High7.6A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files.Check if you run itEPSS 0.48%Apr 30, 2025
- Medium5.3A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0.Check if you run itEPSS 0.22%Apr 30, 2025
- High7.2A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.56%Apr 30, 2025
- Critical9.8A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.47%Apr 30, 2025
Sort