Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was found in playeduxyz PlayEdu 开源培训系统 up to 1.8 and classified as problematic.Check if you run itEPSS 0.47%Apr 28, 2025
- High8.4Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English.Check if you run itEPSS 0.21%Apr 28, 2025
- Medium5.1A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic.Check if you run itEPSS 0.34%Apr 28, 2025
- High8.7A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644).Check if you run itEPSS 1.00%Apr 28, 2025
- High7.3EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed.Check if you run itEPSS 0.43%Apr 28, 2025
- Medium5.1A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0.Check if you run itEPSS 0.35%Apr 28, 2025
- Medium6.9A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0.Check if you run itEPSS 0.52%Apr 28, 2025
- Medium6.9A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0.Check if you run itEPSS 0.52%Apr 28, 2025
- Low3.5The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow high privilege users sCheck if you run itEPSS 0.27%Apr 28, 2025
- Low3.5The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.27%Apr 28, 2025
- Medium5.3The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offereCheck if you run itEPSS 0.39%Apr 28, 2025
- Medium6.8A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB.Check if you run itEPSS 0.20%Apr 28, 2025
- Medium6.8A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic.Check if you run itEPSS 0.20%Apr 28, 2025
- Medium4.8A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic.Check if you run itEPSS 0.19%Apr 28, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.Check if you run itEPSS 0.31%Apr 28, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.Check if you run itEPSS 0.31%Apr 28, 2025
- Medium6.9A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0.Check if you run itEPSS 0.56%Apr 28, 2025
- Medium6.1The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browserCheck if you run itEPSS 0.31%Apr 28, 2025
- Medium4.8A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525.Check if you run itEPSS 5.03%Apr 28, 2025
- High8.7A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical.Check if you run itEPSS 1.04%Apr 28, 2025
- High8.7A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical.Check if you run itEPSS 1.04%Apr 28, 2025
- Critical10.0IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side TempCheck if you run itEPSS 0.80%Apr 28, 2025
- Low3.3In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File.Check if you run itEPSS 0.16%Apr 28, 2025
- Critical9.1A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component.Check if you run itEPSS 0.44%Apr 28, 2025
- Critical9.8A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change PCheck if you run itEPSS 0.52%Apr 28, 2025
Sort