Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A weakness has been identified in huggingface smolagents 1.25.0.dev0.Check if you run itEPSS 0.59%Mar 27, 2026
- High7.4A vulnerability was identified in Tenda AC6 15.03.05.16.Check if you run itEPSS 0.79%Mar 27, 2026
- Medium6.9Appsmith versions prior to 1.98 expose sensitive instance management API endpoints without authentication.Check if you run itEPSS 0.39%Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Mar 27, 2026
- Medium6.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Mar 27, 2026
- Critical9.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.15%Mar 27, 2026
- High7.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.50%Mar 27, 2026
- High7.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.52%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.Check if you run itEPSS 0.26%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.Check if you run itEPSS 0.43%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file.Check if you run itEPSS 0.26%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_category.php file via the "limit" parameter.Check if you run itEPSS 0.28%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_sales.php file via the "limit" parameter.Check if you run itEPSS 0.28%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.28%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.72%Mar 27, 2026
- High7.1Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to exec…Check if you run itEPSS 1.69%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability th…Check if you run itEPSS 0.52%Mar 27, 2026
- Medium5.3Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input.Check if you run itEPSS 0.30%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability th…Check if you run itEPSS 0.44%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).Check if you run itEPSS 0.46%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).Check if you run itEPSS 0.50%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).Check if you run itEPSS 0.46%Mar 27, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel.Check if you run itEPSS 0.24%Mar 27, 2026
- Critical10.0The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Check if you run itEPSS 2.07%Mar 27, 2026
Sort