Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
- High7.1Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequences in th…Check if you run itEPSS 0.56%May 29, 2026
- High7.1MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis…Check if you run itEPSS 0.27%May 29, 2026
- High8.7HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to delete arbitrary records by sending a crafted reque…Check if you run itEPSS 0.33%May 29, 2026
- High8.8HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST…Check if you run itEPSS 0.33%May 29, 2026
- High8.8HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'nama_kelom…Check if you run itEPSS 0.33%May 29, 2026
- High8.7HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by bypassing file type validation.Check if you run itEPSS 0.52%May 29, 2026
- Medium6.9HaPe PKH 1.1 contains a cross-site request forgery vulnerability that allows attackers to change administrator passwords by submitting forged requests to the user update endpoint.Check if you run itEPSS 0.18%May 29, 2026
- High8.8HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the '…Check if you run itEPSS 0.33%May 29, 2026
- High8.8E-Registrasi Pencak Silat 18.10 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.33%May 29, 2026
- Medium5.1Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the reply_t…Check if you run itEPSS 0.21%May 29, 2026
- High8.6Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured…Check if you run itEPSS 0.18%May 29, 2026
- High8.8Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter.Check if you run itEPSS 0.33%May 29, 2026
- Medium6.5mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI.Check if you run itEPSS 0.28%May 29, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.55%May 29, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.53%May 29, 2026
- High7.3Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload…Check if you run itEPSS 0.51%May 29, 2026
- High7.4A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.85%May 29, 2026
- High7.4A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.83%May 29, 2026
- Critical9.2manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of untrusted pickle data in the share…Check if you run itEPSS 0.62%May 29, 2026
- Medium4.1Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with acce…Check if you run itEPSS 0.24%May 29, 2026
- Low1.0Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker t…Check if you run itEPSS 0.20%May 29, 2026
- Low1.0Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker t…Check if you run itEPSS 0.20%May 29, 2026
- Medium4.1Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the mo…Check if you run itEPSS 0.27%May 29, 2026
Sort