Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An authenticated user without user-management permissions could view other users account information.Check if you run itEPSS 0.32%May 12, 2025
- Low2.7An authenticated administrator could modify the Created By username for a user accountCheck if you run itEPSS 0.26%May 12, 2025
- Medium4.3Users who were required to change their password could still access system information before changing their passwordCheck if you run itEPSS 0.24%May 12, 2025
- Medium5.7A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.Check if you run itEPSS 0.15%May 12, 2025
- High7.5An authenticated user without user administrative permissions could change the administrator Account Name.Check if you run itEPSS 0.33%May 12, 2025
- High8.1An unauthenticated user could discover account credentials via a brute-force attack without rate limitingCheck if you run itEPSS 0.38%May 12, 2025
- Medium6.6An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.Check if you run itEPSS 0.19%May 12, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Caissie BNS Twitter Follow Button bns-twitter-follow-button allows DOM-Check if you run itEPSS 0.21%May 12, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicCheck if you run itEPSS 0.24%May 12, 2025
- Medium6.3The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release.Check if you run itEPSS 0.43%May 12, 2025
- High7.5nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.74%May 12, 2025
- Medium6.1VMware Tools contains an insecure file handling vulnerability.Check if you run itEPSS 0.27%May 12, 2025
- Low2.1julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler sofCheck if you run itEPSS 0.49%May 12, 2025
- High7.0EspoCRM is a free, open-source customer relationship management platform.Check if you run itEPSS 0.38%May 12, 2025
- High8.2A stack buffer overflow has been identified in the AsIO3.sys driver.Check if you run itEPSS 0.30%May 12, 2025
- Medium5.1Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor.Check if you run itEPSS 0.69%May 12, 2025
- High8.7The KFOX from KingFor has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privilege to upload and execute web shell backdoors, thereby enabling arbitCheck if you run itEPSS 0.73%May 12, 2025
- Medium6.9The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions.Check if you run itEPSS 0.35%May 12, 2025
- Critical9.3The ISOinsight from Netvision has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database conCheck if you run itEPSS 0.54%May 12, 2025
- Medium6.8The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contributor role to conducCheck if you run itEPSS 0.46%May 12, 2025
- Medium5.9The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library isCheck if you run itEPSS 0.32%May 12, 2025
- Critical9.3The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password toCheck if you run itEPSS 0.53%May 12, 2025
- High8.8The specific APIs of Parking Management System from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific APIs and operatCheck if you run itEPSS 0.54%May 12, 2025
- Critical9.3The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and eCheck if you run itEPSS 0.79%May 12, 2025
- Critical9.3The web management interface of Okcat Parking Management Platform from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly accCheck if you run itEPSS 0.60%May 12, 2025
Sort