Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal or department data to list other users' bills…Check if you run itEPSS 0.21%Oct 12, 2026
- Medium5.3MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files…Check if you run itEPSS 0.20%Oct 12, 2026
- Medium5.3yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject receivables records by calli…Check if you run itEPSS 0.20%Oct 12, 2026
- Medium5.3TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler that allows authenticated users to overwrite othe…Check if you run itEPSS 0.19%Oct 12, 2026
- Medium5.3TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/it…Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing th…Check if you run itEPSS 0.30%Oct 12, 2026
- Medium6.9Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to downl…Check if you run itEPSS 0.33%Oct 12, 2026
- Low1.9A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium4.8A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9.Check if you run itEPSS 0.11%Oct 12, 2026
- Low2.1A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2.Check if you run itEPSS 0.26%Oct 12, 2026
- Low2.0ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing confi…Check if you run itEPSS 0.11%Oct 12, 2026
- Low2.0A security flaw has been discovered in Zen Cart up to 2.2.2.Check if you run itEPSS 0.33%Oct 12, 2026
- Low1.2A vulnerability was determined in Zen Cart up to 2.2.2.Check if you run itEPSS 0.33%Oct 12, 2026
- Low2.1A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3.Check if you run itEPSS 0.36%Oct 12, 2026
- High8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code i…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code i…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.8An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.Check if you run itEPSS 1.80%Oct 12, 2026
- High7.5Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium6.9A vulnerability was detected in Kamailio up to 6.0.7/6.1.3.Check if you run itEPSS 0.77%Oct 12, 2026
- Low2.1A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1.Check if you run itEPSS 0.27%Oct 12, 2026
- High7.5A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode.Check if you run itEPSS 0.13%Oct 12, 2026
- Medium5.5A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.Check if you run itEPSS 0.53%Oct 12, 2026
- Low2.1A vulnerability was found in agno-agi agno up to 3.0.6.Check if you run itEPSS 0.30%Oct 12, 2026
- Low2.1A flaw has been found in SEMCMS up to 5.0.Check if you run itEPSS 0.19%Oct 12, 2026
- Medium5.5A security vulnerability has been detected in SEMCMS up to 5.0.Check if you run itEPSS 0.31%Oct 12, 2026
Sort