Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security vulnerability has been detected in SEMCMS up to 5.0.Check if you run itEPSS 0.31%Oct 12, 2026
- Medium5.5A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2.Check if you run itEPSS 0.32%Oct 12, 2026
- Critical9.1Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed.Check if you run itEPSS 0.30%Oct 12, 2026
- Medium5.3The OTRS Agent Frontend configuration endpoint can be accessed without authentication.Check if you run itEPSS 0.28%Oct 12, 2026
- High8.7A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.Check if you run itEPSS 0.72%Oct 12, 2026
- Medium4.8An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the brows…Check if you run itEPSS 0.14%Oct 12, 2026
- Medium5.4An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.8A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.Check if you run itEPSS 0.25%Oct 12, 2026
- Low1.2A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0.Check if you run itEPSS 0.18%Oct 12, 2026
- Critical9.4Authentication Bypass via Spoofed Remote-User Header in HTTP Basic AuthenticationCheck if you run itEPSS 0.39%Oct 12, 2026
- Medium6.1Insufficient Neutralization of Formula Elements in CSV ExportsCheck if you run itEPSS 0.19%Oct 12, 2026
- Medium5.4Duplicate Identity / Identity Shadowing across CustomerUser backendsCheck if you run itEPSS 0.16%Oct 12, 2026
- Medium4.3Cross-Site Request Forgery in Administrative ActionsCheck if you run itEPSS 0.14%Oct 12, 2026
- High7.1SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, includ…Check if you run itEPSS 0.21%Oct 12, 2026
- Medium5.5A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.Check if you run itEPSS 0.25%Oct 12, 2026
- Critical9.3A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03.Check if you run itEPSS 2.32%Oct 12, 2026
- Low2.0A weakness has been identified in y_project RuoYi up to 4.8.3.Check if you run itEPSS 0.20%Oct 12, 2026
- Medium5.4An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium6.5A flaw has been found in **permission filters** in the **foreman** package.Check if you run itEPSS 0.18%Oct 12, 2026
- High7.8Deserialization of Untrusted DataCheck if you run itEPSS 0.18%Oct 12, 2026
- High8.8The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22).Check if you run itEPSS 0.41%Oct 12, 2026
- High7.3Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.9Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.Check if you run itEPSS 0.10%Oct 12, 2026
- Medium5.1Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.Check if you run itEPSS 0.17%Oct 12, 2026
- Medium6.8Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.Check if you run itEPSS 0.14%Oct 12, 2026
Sort