Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password coCheck if you run itEPSS 0.78%Apr 28, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025
- Medium5.0Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitraCheck if you run itEPSS 0.26%Apr 28, 2025
- Medium4.9Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed.Check if you run itEPSS 0.48%Apr 28, 2025
- Medium4.9OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution.Check if you run itEPSS 0.40%Apr 28, 2025
- Medium5.0DevExpress before 23.1.3 allows AsyncDownloader SSRF.Check if you run itEPSS 0.48%Apr 28, 2025
- Low3.5DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.Check if you run itEPSS 0.55%Apr 28, 2025
- Low3.5DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.Check if you run itEPSS 0.60%Apr 28, 2025
- Low3.5DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.Check if you run itEPSS 0.61%Apr 28, 2025
- Medium6.0SEPPmail through 12.1.17 allows command injection within the Admin Portal.Check if you run itEPSS 1.06%Apr 28, 2025
- High7.2The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS.Check if you run itEPSS 0.27%Apr 28, 2025
- Critical9.9Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.Check if you run itEPSS 1.54%Apr 28, 2025
- Medium6.9Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints.Check if you run itEPSS 0.48%Apr 27, 2025
- High7.1Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal').Check if you run itEPSS 0.69%Apr 27, 2025
- Critical9.2Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal').Check if you run itEPSS 0.86%Apr 27, 2025
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525.Check if you run itEPSS 1.04%Apr 27, 2025
- High8.7A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525.Check if you run itEPSS 1.04%Apr 27, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525.Check if you run itEPSS 1.04%Apr 27, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525.Check if you run itEPSS 1.44%Apr 27, 2025
- Medium5.3TOTOLINK n150rt_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 11.28%Apr 27, 2025
- Medium5.3A vulnerability was found in Apereo CAS 5.2.6.Check if you run itEPSS 0.64%Apr 27, 2025
- Medium5.1A vulnerability was found in Apereo CAS 5.2.6.Check if you run itEPSS 0.62%Apr 27, 2025
- Low2.3A vulnerability was found in Apereo CAS 5.2.6 and classified as critical.Check if you run itEPSS 0.48%Apr 27, 2025
- Medium5.1A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical.Check this weekEPSS 17.94%Apr 27, 2025
- Low2.4Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation.Check if you run itEPSS 0.12%Apr 27, 2025
Sort