Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-siCheck this weekEPSS 43.00%Nov 18, 2025
- Critical9.8The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint.Check this weekEPSS 82.00%Nov 18, 2025
- High7.2The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint.Check this weekEPSS 61.00%Nov 18, 2025
- Medium5.7The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to improper session management on the /UserManagement.hCheck this weekEPSS 22.00%Nov 18, 2025
- Critical9.1Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.Check this weekEPSS 38.00%Nov 18, 2025
- High7.5The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirCheck this weekEPSS 63.00%Nov 18, 2025
- Critical9.8In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability.Check this weekEPSS 50.00%Nov 18, 2025
- High8.7A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07.Check if you run itEPSS 3.85%Nov 17, 2025
- Medium5.4The The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium5.3NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management.Check if you run itEPSS 0.30%Nov 17, 2025
- Medium5.1A vulnerability was identified in code-projects Courier Management System 1.0.Check this weekEPSS 41.00%Nov 17, 2025
- High7.5IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiCheck this weekEPSS 39.00%Nov 17, 2025
- Medium4.3IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.Check this weekEPSS 23.00%Nov 17, 2025
- High8.0IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system.Check if you run itEPSS 0.87%Nov 17, 2025
- High8.6Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature.Check if you run itEPSS 9.24%Nov 17, 2025
- Medium4.8@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce rCheck if you run itEPSS 0.24%Nov 17, 2025
- Medium6.9ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check this weekEPSS 43.00%Nov 17, 2025
- High7.5Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.Check if you run itEPSS 0.30%Nov 17, 2025
- High7.2phpMyFAQ is an open source FAQ web application.Check this weekEPSS 80.00%Nov 17, 2025
- Medium5.3A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0.Check if you run itEPSS 0.33%Nov 17, 2025
- Medium5.3A weakness has been identified in itsourcecode Online Voting System 1.0.Check this weekEPSS 36.00%Nov 17, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Voting System 1.0.Check this weekEPSS 45.00%Nov 17, 2025
- High7.3A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V2Check if you run itEPSS 0.20%Nov 17, 2025
- Medium6.9A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455.Check this weekEPSS 33.00%Nov 17, 2025
- Medium5.1A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24.Check this weekEPSS 31.00%Nov 17, 2025
Sort