Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product.Check if you run itEPSS 0.36%Apr 27, 2025
- Medium6.5There is a SQL injection vulnerability in the GoldenDB database product.Check if you run itEPSS 0.36%Apr 27, 2025
- Medium5.4There is a Permission Management and Access Control vulnerability in the GoldenDB database product.Check if you run itEPSS 0.29%Apr 27, 2025
- Medium4.9There is an information disclosure vulnerability in the GoldenDB database product.Check if you run itEPSS 0.38%Apr 27, 2025
- Medium4.1There is an information disclosure vulnerability in the GoldenDB database product.Check if you run itEPSS 0.24%Apr 27, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0.Check if you run itEPSS 0.45%Apr 27, 2025
- Medium5.0Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request.Check if you run itEPSS 0.38%Apr 27, 2025
- Medium5.4Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI.Check if you run itEPSS 0.28%Apr 27, 2025
- Medium5.6quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow.Check if you run itEPSS 0.33%Apr 27, 2025
- Medium5.6quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow.Check if you run itEPSS 0.30%Apr 27, 2025
- Low3.5In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.Check if you run itEPSS 0.35%Apr 27, 2025
- Low3.5NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.Check if you run itEPSS 0.60%Apr 27, 2025
- Medium4.9NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).Check if you run itEPSS 0.50%Apr 27, 2025
- Low3.5NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.Check if you run itEPSS 0.53%Apr 27, 2025
- High7.2Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.Check if you run itEPSS 0.33%Apr 27, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.1The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' ACheck if you run itEPSS 0.88%Apr 26, 2025
- Medium6.5The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1.Check if you run itEPSS 0.36%Apr 26, 2025
- High8.6A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GLCheck if you run itEPSS 0.40%Apr 26, 2025
- Medium5.1A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300Check if you run itEPSS 0.22%Apr 26, 2025
- Medium6.9A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300Check if you run itEPSS 0.36%Apr 26, 2025
- Medium4.3The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versionCheck if you run itEPSS 0.32%Apr 26, 2025
- High8.8The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all vCheck this weekEPSS 17.36%Apr 26, 2025
- High8.8The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in aCheck if you run itEPSS 0.46%Apr 26, 2025
- High7.2The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_valCheck if you run itEPSS 0.76%Apr 26, 2025
Sort