Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.22%May 30, 2026
- High8.7SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter.Check if you run itEPSS 0.33%May 30, 2026
- High8.7The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoint that allows unauthenticated attackers to download arbitrary files…Check if you run itEPSS 0.64%May 30, 2026
- High8.8eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 30, 2026
- High8.8eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 30, 2026
- High8.8eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 30, 2026
- High7.4A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.46%May 30, 2026
- High7.4A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.47%May 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) clea…Check if you run itEPSS 4.39%May 30, 2026
- Low2.1A weakness has been identified in Open5GS up to 2.7.7.Check if you run itEPSS 0.27%May 30, 2026
- Low2.1A security flaw has been discovered in Open5GS up to 2.7.7.Check if you run itEPSS 0.39%May 30, 2026
- Low2.1A vulnerability was identified in Open5GS up to 2.7.7.Check if you run itEPSS 0.31%May 30, 2026
- Low2.1A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.28%May 30, 2026
- High7.5The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all versions up to, and including, 4.5.5 The paramete…Check if you run itEPSS 0.34%May 30, 2026
- High8.8brainstormforce spectra Improper Privilege ManagementPatch nowKEVEPSS 1.17%May 30, 2026
- High7.5The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to,…Check if you run itEPSS 0.59%May 30, 2026
- Low2.1A vulnerability was found in Open5GS up to 2.7.7.Check if you run itEPSS 0.30%May 30, 2026
- High7.8The SocketCAN implementation validates the length of a user-provided buffer containing a socketcan_frame object using only a NET_ASSERT statement in zcan_sendto_ctx()…Check if you run itEPSS 0.17%May 30, 2026
- Low1.9A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0.Check if you run itEPSS 0.21%May 30, 2026
- Medium5.5A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0.Check if you run itEPSS 0.26%May 30, 2026
- Medium5.5A vulnerability was detected in code-projects Student Details Management System 1.0.Check if you run itEPSS 0.31%May 30, 2026
- Medium5.3Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.Check if you run itEPSS 0.26%May 30, 2026
- Medium6.3A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently a…Check if you run itEPSS 0.17%May 29, 2026
- Low2.0StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric…Check if you run itEPSS 0.13%May 29, 2026
- Medium4.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.15%May 29, 2026
Sort