Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.Check if you run itEPSS 0.38%Apr 24, 2025
- Medium6.8The unsafe globals in Picklescan before 0.0.25 do not include ssl.Check if you run itEPSS 0.23%Apr 24, 2025
- Medium6.5A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_update.php.Check if you run itEPSS 0.27%Apr 24, 2025
- Medium6.5A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/class_save.php.Check if you run itEPSS 0.27%Apr 24, 2025
- Medium4.8A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0.Check if you run itEPSS 0.25%Apr 24, 2025
- Medium6.5ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx.Check if you run itEPSS 0.32%Apr 24, 2025
- High8.0Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles.Check if you run itEPSS 0.27%Apr 24, 2025
- Low3.7IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using manCheck if you run itEPSS 0.18%Apr 23, 2025
- Medium4.3IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.Check if you run itEPSS 0.30%Apr 23, 2025
- Medium6.3IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.5In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.5A flaw was found in fig2dev.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.5In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.Check if you run itEPSS 0.27%Apr 23, 2025
- High7.8A flaw was found in xfig.Check if you run itEPSS 0.30%Apr 23, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.84%Apr 23, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.Check if you run itEPSS 0.15%Apr 23, 2025
- High7.3Vulnerability in Drupal Sportsleague.This issue affects Sportsleague: *.*.Check if you run itEPSS 0.30%Apr 23, 2025
- High7.3Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.Check if you run itEPSS 0.40%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class allows Cross-Site Scripting (XSS).This issue affects BlockCheck if you run itEPSS 0.25%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affecCheck if you run itEPSS 0.25%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox:Check if you run itEPSS 0.26%Apr 23, 2025
- High7.2BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 2.14%Apr 23, 2025
- Medium5.3BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability.Check if you run itEPSS 0.45%Apr 23, 2025
- Medium5.3BEC Technologies Multiple Routers Authentication Bypass Vulnerability.Check if you run itEPSS 0.92%Apr 23, 2025
- Medium4.9BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability.Check if you run itEPSS 0.50%Apr 23, 2025
Sort