Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection DiagnoCheck if you run itEPSS 0.97%Jun 24, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- Unknownnavidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Jun 24, 2025
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.95%Jun 24, 2025
- Low2.7xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF.Check if you run itEPSS 0.21%Jun 23, 2025
- UnknownSymantec endpoint_detection_and_response Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.49%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.30%Jun 23, 2025
- Critical9.8An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService componentCheck if you run itEPSS 0.72%Jun 23, 2025
- High7.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.Check if you run itEPSS 0.44%Jun 21, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.96%Jun 21, 2025
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.96%Jun 21, 2025
- High8.8DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.35%Jun 21, 2025
- Medium5.1DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.21%Jun 21, 2025
- Medium4.3The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.Check if you run itEPSS 0.32%Jun 21, 2025
- Medium6.9A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0.Check if you run itEPSS 0.70%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in indgeek ClipLink cliplink allows Cross Site Request Forgery.This issue affects ClipLink: from n/a through <= 1.1.Check if you run itEPSS 0.14%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Oganro Oganro Travel Portal Search Widget for HotelBeds APITUDE API oganro-travel-portal-search-widget-for-hotelbeds-apitude-apiCheck if you run itEPSS 0.15%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Oganro PixelBeds Channel Manager and Hotel Booking Engine pixelbeds-channel-manager-booking-engine allows Cross Site Request ForgCheck if you run itEPSS 0.15%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Oganro XML Travel Portal Widget oganro-reservation-widget allows Cross Site Request Forgery.This issue affects XML Travel PortalCheck if you run itEPSS 0.15%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in marcusjansen Live Sports Streamthunder live-sports-streamthunder allows Cross Site Request Forgery.This issue affects Live SportsCheck if you run itEPSS 0.15%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in David Wood TM Replace Howdy tm-replace-howdy allows Cross Site Request Forgery.This issue affects TM Replace Howdy: from n/a throCheck if you run itEPSS 0.15%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.0.Check if you run itEPSS 0.15%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Cross Site Request Forgery.This issue affects WP Inventory Manager:Check if you run itEPSS 0.15%Jun 20, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request Forgery.This issue affects PowerPress Podcasting: from n/a tCheck if you run itEPSS 0.20%Jun 20, 2025
Sort