Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level p…Check if you run itEPSS 0.30%Apr 27, 2026
- High8.7ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload…Check if you run itEPSS 1.08%Apr 27, 2026
- Critical9.3ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenat…Check if you run itEPSS 0.56%Apr 27, 2026
- High7.5A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path c…Check if you run itEPSS 0.45%Apr 27, 2026
- Medium5.5A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- High8.2SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initia…Check if you run itEPSS 0.15%Apr 27, 2026
- Medium5.5A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Check if you run itEPSS 0.29%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.19%Apr 27, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- Low2.1A weakness has been identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.23%Apr 27, 2026
- High7.8Document structural anomalies caused inconsistencies between page element relationships and internal index states.Check if you run itEPSS 0.18%Apr 27, 2026
- Medium5.5Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.Check if you run itEPSS 0.10%Apr 27, 2026
- Low2.1A vulnerability was identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.19%Apr 27, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Patch nowKEVEPSS 9.18%Apr 27, 2026
- High8.8The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Jav…Check if you run itEPSS 1.23%Apr 27, 2026
- High8.8The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream…Check if you run itEPSS 1.31%Apr 27, 2026
- High8.2When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /a…Check if you run itEPSS 0.94%Apr 27, 2026
- Critical9.4The Camel-Mail component is vulnerable to Camel message header injection.Check if you run itEPSS 1.49%Apr 27, 2026
- Low2.1A weakness has been identified in code-projects Invoice System in Laravel 1.0.Check if you run itEPSS 0.20%Apr 27, 2026
- Critical9.8Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the…Check if you run itEPSS 0.62%Apr 27, 2026
- Critical9.8JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via java…Check if you run itEPSS 1.74%Apr 27, 2026
- High7.4A weakness has been identified in Tenda F456 1.0.0.5.Check if you run itEPSS 0.81%Apr 27, 2026
- Low2.1A vulnerability was identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.27%Apr 27, 2026
- Medium5.6OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hija…Check if you run itEPSS 0.08%Apr 27, 2026
Sort