Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A flaw has been found in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Medium5.5A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- High8.7Snipe-IT is an IT asset/license management system.Check if you run itEPSS 0.44%May 26, 2026
- High8.8code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted…Check if you run itEPSS 0.57%May 26, 2026
- High7.2IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that i…Check if you run itEPSS 0.50%May 26, 2026
- High7.3IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference.Check if you run itEPSS 0.31%May 26, 2026
- High8.0IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability.Check if you run itEPSS 0.34%May 26, 2026
- Critical9.3Kavita is a cross platform reading server.Check if you run itEPSS 0.22%May 26, 2026
- High7.2OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.46%May 26, 2026
- Low1.9A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0.Check if you run itEPSS 0.35%May 26, 2026
- Medium5.3Traccar is an open source GPS tracking system.Check if you run itEPSS 0.25%May 26, 2026
- Medium4.6Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.Check if you run itEPSS 0.14%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the readmore links for com_content.Check if you run itEPSS 0.24%May 26, 2026
- Critical9.2A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service a…Check if you run itEPSS 0.36%May 26, 2026
- High7.6IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration.Check if you run itEPSS 0.18%May 26, 2026
- High8.1FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism.Check if you run itEPSS 0.38%May 26, 2026
- Medium4.3e107 is a content management system (CMS).Check if you run itEPSS 0.33%May 26, 2026
- Medium4.3An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1.Check if you run itEPSS 0.27%May 26, 2026
- High8.6OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scrip…Check if you run itEPSS 1.18%May 26, 2026
- High8.6OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against the appli…Check if you run itEPSS 0.89%May 26, 2026
- Medium6.9OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scripting that allows authenticated administrators to r…Check if you run itEPSS 0.55%May 26, 2026
- High8.9A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305.Check if you run itEPSS 3.25%May 26, 2026
- Low2.1A weakness has been identified in CodeAstro Leave Management System 1.0.Check if you run itEPSS 0.32%May 26, 2026
- Medium4.1When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stor…Check if you run itEPSS 0.26%May 26, 2026
- High8.5The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation.Check if you run itEPSS 0.12%May 26, 2026