Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 20.90%Apr 16, 2025
- Medium6.1SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.Check if you run itEPSS 0.30%Apr 16, 2025
- Critical9.8SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.Check if you run itEPSS 0.62%Apr 16, 2025
- Critical9.8SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.Check if you run itEPSS 0.62%Apr 16, 2025
- High7.5PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.Check if you run itEPSS 0.88%Apr 16, 2025
- Medium5.4A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28.Check if you run itEPSS 0.35%Apr 16, 2025
- Low3.7In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.Check if you run itEPSS 0.53%Apr 16, 2025
- Low3.5nopCommerce through 4.90.1 does not offer locking for order placement.Check if you run itEPSS 0.36%Apr 16, 2025
- Critical9.8Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by uploading a ZIP file.Check if you run itEPSS 0.65%Apr 16, 2025
- Critical9.8Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uploading a ZIP file.Check if you run itEPSS 0.63%Apr 16, 2025
- High7.3An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query.Check if you run itEPSS 0.59%Apr 16, 2025
- Medium6.5An issue in LRQA Nettitude PoshC2 after commit 09ee2cf allows unauthenticated attackers to connect to the C2 server and execute arbitrary commands via posing as an infected machineCheck if you run itEPSS 0.39%Apr 16, 2025
- High8.8A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2 after commit 123db87 allows authenticated attackers to execute arbitrary code via aCheck if you run itEPSS 0.94%Apr 16, 2025
- Medium4.8Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSettings.php?f=update_settings, and the poiCheck if you run itEPSS 0.27%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at id_generator/admin/?page=generate&template=4.Check if you run itEPSS 0.51%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=generate/index&id=1.Check if you run itEPSS 0.51%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystemSettings.php?f=update_settings.Check if you run itEPSS 0.78%Apr 16, 2025
- Medium5.1Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Users.php?f=save.Check if you run itEPSS 0.26%Apr 16, 2025
- Medium5.4Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php?f=save, and the point of vulnerabilityCheck if you run itEPSS 0.28%Apr 16, 2025
- Medium5.9Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=templates/manage_template&id=Check if you run itEPSS 0.25%Apr 16, 2025
- Critical9.6NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system.Check if you run itEPSS 0.60%Apr 15, 2025
- Medium5.3EspoCRM is an Open Source Customer Relationship Management software.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium5.4SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Check if you run itEPSS 0.30%Apr 15, 2025
- Low2.6Hydra is a Continuous Integration service for Nix based projects.Check if you run itEPSS 0.36%Apr 15, 2025
- Medium5.3Ash Authentication provides authentication for the Ash framework.Check if you run itEPSS 0.32%Apr 15, 2025
Sort