Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.Check if you run itEPSS 0.21%Aug 27, 2025
- High7.8Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability.Check if you run itEPSS 0.13%Aug 27, 2025
- Critical9.6Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability.Check if you run itEPSS 0.35%Aug 27, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Payroll Management System 1.0.Check if you run itEPSS 0.56%Aug 27, 2025
- Medium5.1Linksys e1700_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 54.47%Aug 27, 2025
- High8.7A vulnerability was found in Linksys E1700 1.0.0.4.003.Check if you run itEPSS 1.54%Aug 27, 2025
- High8.7A vulnerability has been found in Linksys E1700 1.0.0.4.003.Check if you run itEPSS 1.49%Aug 27, 2025
- High8.7A flaw has been found in Linksys E1700 1.0.0.4.003.Check if you run itEPSS 1.49%Aug 27, 2025
- Critical9.3A vulnerability was detected in Tenda AC1206 15.03.06.23.Check if you run itEPSS 1.16%Aug 27, 2025
- High8.8An insufficiently secured internal function allows session generation for arbitrary users.Check if you run itEPSS 0.08%Aug 27, 2025
- Critical9.4The configuration file containing database logins and passwords is readable by any local user.Check if you run itEPSS 0.13%Aug 27, 2025
- Medium6.9In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter.Check if you run itEPSS 0.22%Aug 27, 2025
- Medium6.9In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.Check if you run itEPSS 0.22%Aug 27, 2025
- Medium6.9In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.Check if you run itEPSS 0.22%Aug 27, 2025
- Medium6.9In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.Check if you run itEPSS 0.22%Aug 27, 2025
- Critical9.4In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.Check if you run itEPSS 0.72%Aug 27, 2025
- Critical9.4The RunCommand function accepts any parameter, which is then passed for execution in the shell.Check if you run itEPSS 0.23%Aug 27, 2025
- Critical9.0The "system" function receives untrusted input from the user.Check if you run itEPSS 0.23%Aug 27, 2025
- Medium5.3The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.Check if you run itEPSS 0.21%Aug 27, 2025
- Critical9.0The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session ICheck if you run itEPSS 0.18%Aug 27, 2025
- Critical9.0The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.Check if you run itEPSS 0.18%Aug 27, 2025
- Critical9.0Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privilegeCheck if you run itEPSS 0.18%Aug 27, 2025
- High7.3The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET.Check if you run itEPSS 0.17%Aug 27, 2025
- High8.8The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are instead publicly accessible without authentCheck if you run itEPSS 0.21%Aug 27, 2025
Sort