Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administraCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modiCheck if you run itEPSS 0.24%Dec 9, 2025
- Medium4.3An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.Check if you run itEPSS 0.26%Dec 9, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web script or HTCheck if you run itEPSS 0.26%Dec 9, 2025
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- High8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files.Check if you run itEPSS 0.77%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() tad_pmu_init() won't remove the callbaCheck if you run itEPSS 0.20%Dec 8, 2025
- Medium6.3WBCE CMS is a content management system.Check if you run itEPSS 0.48%Dec 8, 2025
- Medium6.5IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtaCheck if you run itEPSS 0.27%Dec 8, 2025
- Medium5.3A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0.Check if you run itEPSS 0.23%Dec 8, 2025
- High7.8In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value.Check if you run itEPSS 0.08%Dec 8, 2025
- High8.8In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure.Check if you run itEPSS 0.38%Dec 8, 2025
- High7.8In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper input validation.Check if you run itEPSS 0.11%Dec 8, 2025
- High7.8In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper input validation.Check if you run itEPSS 0.09%Dec 8, 2025
- Medium6.9A weakness has been identified in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Medium6.9A vulnerability was identified in code-projects Simple Shopping Cart 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Medium4.8A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
- High8.1In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Factor Authentication (2FA) verification.Check if you run itEPSS 0.41%Dec 8, 2025
- Medium5.3A vulnerability was detected in code-projects Daily Time Recording System 4.5.0.Check if you run itEPSS 0.31%Dec 8, 2025
- Medium5.1A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15.Check if you run itEPSS 0.23%Dec 8, 2025
- Medium6.9A vulnerability was identified in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Critical9.8Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.TCheck if you run itEPSS 0.43%Dec 8, 2025
- Medium5.3A vulnerability was determined in D-Link DCS-930L 1.15.04.Check if you run itEPSS 8.86%Dec 8, 2025
- High8.6Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests througCheck if you run itEPSS 0.35%Dec 8, 2025
- Medium4.0Permission control vulnerability in the window management module.Check if you run itEPSS 0.09%Dec 8, 2025
Sort