Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code.Check if you run itEPSS 0.16%Aug 27, 2025
- Critical9.4In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter.Check if you run itEPSS 0.25%Aug 27, 2025
- Medium6.5An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices.Check if you run itEPSS 0.67%Aug 27, 2025
- Medium6.3A vulnerability has been found in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.41%Aug 27, 2025
- High8.5Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61.Check if you run itEPSS 0.14%Aug 27, 2025
- Medium6.3A flaw has been found in editso fuso up to 1.0.4-beta.7.Check if you run itEPSS 0.16%Aug 27, 2025
- Medium6.9A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- High8.5Multiple i-フィルター products contain an issue with incorrect default permissions.Check if you run itEPSS 0.16%Aug 27, 2025
- Medium5.3Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through 1.17.0.Check if you run itEPSS 0.33%Aug 27, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.9A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.9A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.9A flaw has been found in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.50%Aug 27, 2025
- Medium6.9A vulnerability was detected in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaimchaikin Admin Menu Groups admin-menu-groups allows Stored XSS.This issueCheck if you run itEPSS 0.18%Aug 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View link-view allows Stored XSS.This issue affects Link View: frCheck if you run itEPSS 0.18%Aug 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt Backup Bolt backup-bolt allows Cross Site Request Forgery.This issue affects Backup Bolt: from n/a through <= 1.5.0.Check if you run itEPSS 0.13%Aug 27, 2025
- Medium6.9A security vulnerability has been detected in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.45%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.4The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insuffiCheck if you run itEPSS 0.25%Aug 27, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1.Patch nowKEVEPSS 0.53%Aug 27, 2025
- Medium5.8Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums.Check if you run itEPSS 0.40%Aug 27, 2025
- High7.3In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.Check if you run itEPSS 0.25%Aug 27, 2025
Sort