Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authenticated attackers to inject arbitrary JavaScript…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics214.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.26%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213rr.php that allows authenticated attackers to inject arbitrary JavaScr…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205a.php that allows authenticated attackers to inject arbitrary JavaScri…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics202.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in icons/buttons/landb.php that allows authenticated attackers to inject arbitr…Check if you run itEPSS 0.26%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in delete_module.php that allows authenticated attackers to inject arbitrary Ja…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in db_loader.php that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium6.5Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.31%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript b…Check if you run itEPSS 0.17%May 21, 2026
- Critical9.8Deserialization of untrusted data in Apache Fory PyFory.Check if you run itEPSS 0.57%May 21, 2026
- High8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations.Check if you run itEPSS 0.31%May 21, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection.Check if you run itEPSS 0.24%May 21, 2026
- Medium6.2Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a…Check if you run itEPSS 0.13%May 21, 2026
- Medium6.3Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force.Check if you run itEPSS 0.18%May 21, 2026
- Medium5.7Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking.Check if you run itEPSS 0.18%May 21, 2026
- High7.8A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.30%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.25%May 21, 2026
Sort