Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allCheck if you run itEPSS 0.26%May 23, 2025
- Medium4.8Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.27%May 23, 2025
- Medium6.5PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailCheck if you run itEPSS 0.42%May 23, 2025
- Medium4.4PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and passCheck if you run itEPSS 0.22%May 23, 2025
- Critical9.8PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php.Check if you run itEPSS 0.50%May 23, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.35%May 23, 2025
- Medium6.1Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes.Check if you run itEPSS 0.28%May 23, 2025
- Medium5.4PHPGurukul Old Age Home Management System v1.0 is vulnerable to HTML Injection via the searchdata parameter.Check if you run itEPSS 0.26%May 23, 2025
- Low2.9parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.Check if you run itEPSS 0.28%May 23, 2025
- High8.7On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute codCheck if you run itEPSS 0.49%May 23, 2025
- Medium5.9Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposeCheck if you run itEPSS 0.35%May 22, 2025
- Medium6.9Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device.Check if you run itEPSS 0.24%May 22, 2025
- Medium5.8OpenFGA is an authorization/permission engine.Check if you run itEPSS 0.50%May 22, 2025
- Medium4.8When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that devicCheck if you run itEPSS 0.15%May 22, 2025
- Medium5.5zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.Check if you run itEPSS 0.18%May 22, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.40%May 22, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.28%May 22, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input.Check if you run itEPSS 0.26%May 22, 2025
- Medium5.8An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid objCheck if you run itEPSS 0.33%May 22, 2025
- Medium4.6A reflected cross-site scripting (XSS) vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7.0.0 due to improper input validation.Check if you run itEPSS 0.23%May 22, 2025
- High7.1Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MCheck if you run itEPSS 0.33%May 22, 2025
- Medium4.6Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: throughCheck if you run itEPSS 0.23%May 22, 2025
- High7.0SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: thrCheck if you run itEPSS 0.29%May 22, 2025
- High8.8SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*;Check if you run itEPSS 0.45%May 22, 2025
- Critical9.42nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affecCheck if you run itEPSS 0.39%May 22, 2025
Sort