Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction.Check this weekEPSS 38.00%Nov 20, 2025
- High7.3Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the user for confirmation.Check this weekEPSS 33.00%Nov 20, 2025
- Critical9.3BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments.Check if you run itEPSS 0.86%Nov 20, 2025
- Medium5.9IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security.Check this weekEPSS 23.00%Nov 20, 2025
- High7.2Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd.Check if you run itEPSS 0.38%Nov 20, 2025
- Medium5.3A weakness has been identified in SourceCodester Alumni Management System 1.0.Check this weekEPSS 41.00%Nov 20, 2025
- Medium5.3A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequeCheck this weekEPSS 36.00%Nov 20, 2025
- Medium6.5Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers withCheck if you run itEPSS 0.21%Nov 20, 2025
- Critical9.2An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted wereCheck this weekEPSS 38.00%Nov 20, 2025
- Medium5.3The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handCheck if you run itEPSS 0.26%Nov 20, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Shop Project 1.0.Check this weekEPSS 44.00%Nov 20, 2025
- Medium6.3A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT.Check this weekEPSS 80.00%Nov 20, 2025
- Medium6.9A weakness has been identified in jameschz Hush Framework 2.0.Check this weekEPSS 50.00%Nov 20, 2025
- Medium6.1Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow.Check if you run itEPSS 0.25%Nov 20, 2025
- Critical9.8The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.Check this weekEPSS 61.00%Nov 20, 2025
- High7.5Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.Check this weekEPSS 31.00%Nov 20, 2025
- Medium6.1phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76.Check this weekEPSS 22.00%Nov 20, 2025
- Medium6.5phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396.Check this weekEPSS 31.00%Nov 20, 2025
- Medium6.5phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118.Check this weekEPSS 29.00%Nov 20, 2025
- Medium6.1phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components.Check this weekEPSS 25.00%Nov 20, 2025
- Medium6.5Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707.Check this weekEPSS 22.00%Nov 20, 2025
- Critical9.8Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.Check this weekEPSS 32.00%Nov 20, 2025
- High7.5FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless.Check if you run itEPSS 0.25%Nov 20, 2025
- Medium6.9A weakness has been identified in itsourcecode Human Resource Management System 1.0.Check this weekEPSS 42.00%Nov 19, 2025
- Medium6.5IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation.Check this weekEPSS 29.00%Nov 19, 2025
Sort