Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request Since commit 15f73f5b3e59 ("blk-mq: move failure inje…Check if you run itEPSS 0.18%May 8, 2026
- High8.6Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26.Check if you run itEPSS 0.42%May 8, 2026
- Critical9.3Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication.Check if you run itEPSS 0.57%May 8, 2026
- High7.2The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sa…Check if you run itEPSS 0.51%May 8, 2026
- Critical9.9Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.Check if you run itEPSS 0.68%May 8, 2026
- Critical9.1Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property.Check if you run itEPSS 0.81%May 8, 2026
- High7.3An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209.Check if you run itEPSS 3.60%May 8, 2026
- Critical9.8Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL state…Check if you run itEPSS 0.76%May 8, 2026
- High7.3Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.Check if you run itEPSS 0.81%May 8, 2026
- Medium5.5A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0.Check if you run itEPSS 0.45%May 8, 2026
- Medium5.5A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium5.5A vulnerability was identified in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium4.9Kimai is an open-source time tracking application.Check if you run itEPSS 0.42%May 8, 2026
- High7.8Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.Check if you run itEPSS 0.54%May 8, 2026
- Medium5.4Kimai is an open-source time tracking application.Check if you run itEPSS 0.33%May 8, 2026
- High7.1PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management.Check if you run itEPSS 0.34%May 8, 2026
- Medium5.5A vulnerability was found in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Low2.1A vulnerability has been found in eladmin up to 2.7.Check if you run itEPSS 0.35%May 8, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.45%May 8, 2026
- Medium5.9A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft.Check if you run itEPSS 0.26%May 7, 2026
- Medium6.3In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer.Check if you run itEPSS 0.33%May 7, 2026
- Medium5.5A security vulnerability has been detected in code-projects Feedback System 1.0.Check if you run itEPSS 0.41%May 7, 2026
- Medium5.1manage.get.gov is the .gov TLD registrar maintained by CISA.Check if you run itEPSS 0.59%May 7, 2026
- Medium5.4FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.36%May 7, 2026
- Critical9.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.42%May 7, 2026