Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.35%May 19, 2026
- Medium6.6CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.69%May 19, 2026
- Medium5.1In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin.Check if you run itEPSS 0.50%May 19, 2026
- High8.6Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write r…Check if you run itEPSS 0.32%May 19, 2026
- Medium4.6In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnost…Check if you run itEPSS 0.27%May 19, 2026
- Critical9.8The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role dur…Check if you run itEPSS 0.63%May 19, 2026
- Critical9.3Tyler Identity Local (TID-L) uses documented, default administrative credentials.Check if you run itEPSS 0.51%May 19, 2026
- Medium5.3An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors.Check if you run itEPSS 0.15%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.83%May 19, 2026
- High8.7Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role.Check if you run itEPSS 0.43%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 1.10%May 19, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.46%May 19, 2026
- High7.1The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize().Check if you run itEPSS 0.50%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
- High7.8Mullvad VPN is a VPN client app for desktop and mobile.Check if you run itEPSS 0.12%May 19, 2026
- UnknownOracle marketing Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.60%May 19, 2026
- UnknownOracle marketing Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.65%May 19, 2026
- Critical9.1Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a craf…Check if you run itEPSS 0.24%May 18, 2026
- High8.8Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges t…Check if you run itEPSS 0.44%May 18, 2026
- High8.7Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet gen…Check if you run itEPSS 0.41%May 18, 2026
- High7.1The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scri…Check if you run itEPSS 0.25%May 18, 2026
- Low2.0A weakness has been identified in linlinjava litemall up to 1.8.0.Check if you run itEPSS 0.33%May 18, 2026