Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic keys.Check if you run itEPSS 0.14%Aug 29, 2025
- High7.5Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request.Check if you run itEPSS 1.19%Aug 29, 2025
- Medium5.4SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module.Check if you run itEPSS 0.27%Aug 29, 2025
- Medium5.4SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality.Check if you run itEPSS 0.27%Aug 29, 2025
- Medium4.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.60%Aug 29, 2025
- Critical9.8SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/java/cn/gson/oasys/mappCheck if you run itEPSS 0.63%Aug 29, 2025
- High8.1Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation.Check if you run itEPSS 0.25%Aug 29, 2025
- High8.1Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., lCheck if you run itEPSS 0.38%Aug 29, 2025
- Critical9.8TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.Check if you run itEPSS 1.06%Aug 29, 2025
- Medium6.9A vulnerability was determined in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.44%Aug 28, 2025
- Medium5.3A vulnerability was found in code-projects Student Information Management System 1.0.Check if you run itEPSS 0.41%Aug 28, 2025
- Low3.4An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.Check if you run itEPSS 0.43%Aug 28, 2025
- Medium6.9A vulnerability has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 28, 2025
- Medium6.9A flaw has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 28, 2025
- High7.3LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer.Check if you run itEPSS 1.22%Aug 28, 2025
- Medium5.5OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes.Check if you run itEPSS 0.14%Aug 28, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.50%Aug 28, 2025
- Medium4.8A security vulnerability has been detected in ZrLog up to 3.1.5.Check if you run itEPSS 0.28%Aug 28, 2025
- Medium5.3xz is a pure golang package for reading and writing xz-compressed files.Check if you run itEPSS 0.43%Aug 28, 2025
- Medium5.1A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813.Check if you run itEPSS 0.27%Aug 28, 2025
- Low2.0A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810.Check if you run itEPSS 0.13%Aug 28, 2025
- Medium5.3A vulnerability was identified in Comfast CF-N1 2.6.0.Check if you run itEPSS 7.52%Aug 28, 2025
- Medium5.3A vulnerability was determined in Comfast CF-N1 2.6.0.Check if you run itEPSS 4.62%Aug 28, 2025
- Medium5.3A vulnerability was found in Comfast CF-N1 2.6.0.Check if you run itEPSS 7.52%Aug 28, 2025
- Medium5.3A vulnerability has been found in Comfast CF-N1 2.6.0.Check if you run itEPSS 4.62%Aug 28, 2025
Sort