Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3A command injection vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 0.99%Mar 20, 2026
- Medium6.8A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 0.33%Mar 20, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect QVR Pro.Check if you run itEPSS 0.69%Mar 20, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.Check if you run itEPSS 0.18%Mar 20, 2026
- High7.3An SQL injection vulnerability has been reported to affect QHora.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium5.6An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora.Check if you run itEPSS 0.19%Mar 20, 2026
- Medium4.0A weak authentication vulnerability has been reported to affect QHora.Check if you run itEPSS 0.21%Mar 20, 2026
- Low0.9An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora.Check if you run itEPSS 0.29%Mar 20, 2026
- High7.7This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters ca…Check if you run itEPSS 0.67%Mar 20, 2026
- High7.4A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.52%Mar 20, 2026
- High8.6Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a pr…Check if you run itEPSS 0.22%Mar 20, 2026
- Medium5.1Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanit…Check if you run itEPSS 0.16%Mar 20, 2026
- High7.1The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.Check if you run itEPSS 0.31%Mar 20, 2026
- Medium5.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.34%Mar 20, 2026
- Critical9.4OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated con…Check if you run itEPSS 0.57%Mar 20, 2026
- High7.4A vulnerability was found in D-Link DIR-513 1.10.Check if you run itEPSS 0.62%Mar 20, 2026
- Medium5.4An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.15%Mar 20, 2026
- Medium6.1An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.Check if you run itEPSS 0.23%Mar 20, 2026
- Medium6.1Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/h/rest).Check if you run itEPSS 0.23%Mar 20, 2026
- Medium6.1The error_description parameter is vulnerable to Reflected XSS.Check if you run itEPSS 0.25%Mar 20, 2026
- Medium5.3An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.Check if you run itEPSS 0.31%Mar 20, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.31%Mar 20, 2026
- High8.6WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium5.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.32%Mar 20, 2026
Sort