Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.30%Aug 29, 2025
- Medium5.1A vulnerability was determined in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.30%Aug 29, 2025
- Low2.1A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f.Check if you run itEPSS 0.26%Aug 29, 2025
- Low1.9A security vulnerability has been detected in appneta tcpreplay 4.5.1.Check if you run itEPSS 0.26%Aug 29, 2025
- Medium5.3A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3.Check if you run itEPSS 0.42%Aug 29, 2025
- Low2.1A weakness has been identified in mtons mblog up to 3.5.0.Check if you run itEPSS 0.37%Aug 29, 2025
- Low2.0A security flaw has been discovered in O2OA up to 10.0-410.Check if you run itEPSS 0.28%Aug 29, 2025
- Medium5.5A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.43%Aug 29, 2025
- Medium5.5A vulnerability was determined in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Medium5.5A vulnerability was found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.43%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validat…Check if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium6.5The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36 via the 'used_svg' and 'used_images' parameters.Check if you run itEPSS 0.53%Aug 29, 2025
- High8.1The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions upCheck if you run itEPSS 0.74%Aug 29, 2025
- Low2.3Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up…Check if you run itEPSS 0.18%Aug 29, 2025
- Medium5.9Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover p…Check if you run itEPSS 0.09%Aug 29, 2025
- Medium5.3A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation.Check if you run itEPSS 0.43%Aug 29, 2025
- Medium6.3Payload uses JSON Web Tokens (JWT) for authentication.Check if you run itEPSS 0.41%Aug 29, 2025
- Medium5.9Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing meCheck if you run itEPSS 0.09%Aug 29, 2025
Sort