Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionCheck if you run itEPSS 0.19%Oct 11, 2026
- Low2.1A vulnerability was found in 021is elvix-sdk up to 0.10.1.Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3Lippu Docx Reader Office Viewer App path traversalCheck if you run itEPSS 0.41%Oct 11, 2026
- Critical9.4OpenSpug File Transfer transfer os command injectionCheck if you run itEPSS 1.70%Oct 11, 2026
- Low2.1A security vulnerability has been detected in GPAC up to 26.07.0.Check if you run itEPSS 0.22%Oct 11, 2026
- Medium6.9Studio-Saelix Sencho Login Endpoint login improper authenticationCheck if you run itEPSS 0.42%Oct 11, 2026
- Medium5.3CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint that allows authenticated users to import data int…Check if you run itEPSS 0.20%Oct 11, 2026
- Medium5.31Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side…Check if you run itEPSS 0.23%Oct 11, 2026
- High7.11Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list business titles by calling POST /field/source/…Check if you run itEPSS 0.24%Oct 11, 2026
- High7.1ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pan…Check if you run itEPSS 0.26%Oct 11, 2026
- High7.3ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name…Check if you run itEPSS 0.13%Oct 11, 2026
- High7.11Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking…Check if you run itEPSS 0.24%Oct 11, 2026
- Medium5.3Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying a…Check if you run itEPSS 0.17%Oct 11, 2026
- Critical9.3Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting thCheck if you run itEPSS 0.55%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendT…Check if you run itEPSS 0.19%Oct 10, 2026
- High7.1JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any use…Check if you run itEPSS 0.23%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged authenticated user…Check if you run itEPSS 0.19%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to r…Check if you run itEPSS 0.21%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsController that allows any authenticated user to…Check if you run itEPSS 0.19%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling…Check if you run itEPSS 0.19%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that allows any authenticated user to modify AI prompt templates.Check if you run itEPSS 0.19%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT…Check if you run itEPSS 0.21%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus.Check if you run itEPSS 0.19%Oct 10, 2026
- High8.6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenan…Check if you run itEPSS 0.23%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that allows low-privileged authenticated users to r…Check if you run itEPSS 0.24%Oct 10, 2026
Sort