Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows unauthenticated remote attackersCheck if you run itEPSS 0.53%May 23, 2025
- Medium4.3A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive informationCheck if you run itEPSS 0.34%May 23, 2025
- Medium4.0gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case.Check if you run itEPSS 0.32%May 23, 2025
- Medium5.4openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.Check if you run itEPSS 0.24%May 23, 2025
- Medium6.4An issue was discovered in CyberDAVA before 1.1.20.Check if you run itEPSS 0.22%May 23, 2025
- Medium6.5Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.Check if you run itEPSS 0.39%May 23, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecCheck if you run itEPSS 0.29%May 23, 2025
- Critical9.8An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php fileCheck if you run itEPSS 0.99%May 23, 2025
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allCheck if you run itEPSS 0.26%May 23, 2025
- Medium4.8Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.27%May 23, 2025
- Medium6.5PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailCheck if you run itEPSS 0.42%May 23, 2025
- Medium4.4PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and passCheck if you run itEPSS 0.22%May 23, 2025
- Critical9.8PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php.Check if you run itEPSS 0.50%May 23, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.35%May 23, 2025
- Medium6.1Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes.Check if you run itEPSS 0.28%May 23, 2025
- Medium5.4PHPGurukul Old Age Home Management System v1.0 is vulnerable to HTML Injection via the searchdata parameter.Check if you run itEPSS 0.26%May 23, 2025
- Low2.9parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.Check if you run itEPSS 0.28%May 23, 2025
- High8.7On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute codCheck if you run itEPSS 0.49%May 23, 2025
- Medium5.9Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposeCheck if you run itEPSS 0.35%May 22, 2025
- Medium6.9Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device.Check if you run itEPSS 0.24%May 22, 2025
- Medium5.8OpenFGA is an authorization/permission engine.Check if you run itEPSS 0.50%May 22, 2025
- Medium4.8When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that devicCheck if you run itEPSS 0.15%May 22, 2025
- Medium5.5zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.Check if you run itEPSS 0.18%May 22, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.40%May 22, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.28%May 22, 2025
Sort