Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.5In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback formCheck if you run itEPSS 0.34%Nov 10, 2025
- Medium5.3In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users APICheck if you run itEPSS 0.22%Nov 10, 2025
- Low2.7In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limitCheck if you run itEPSS 0.17%Nov 10, 2025
- Low2.7In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitationsCheck if you run itEPSS 0.20%Nov 10, 2025
- Medium6.9A vulnerability was identified in projectworlds Online Admission System 1.0.Check if you run itEPSS 0.46%Nov 10, 2025
- Medium5.1Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of proper validation of user input by sending a POST request usiCheck if you run itEPSS 0.21%Nov 10, 2025
- Medium5.1Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affectsCheck if you run itEPSS 0.21%Nov 10, 2025
- High7.4A vulnerability was identified in the password generation algorithm when accessing the debug-interface.Check if you run itEPSS 0.14%Nov 10, 2025
- Medium5.3A vulnerability was identified in SourceCodester Baby Care System 1.0.Check if you run itEPSS 0.35%Nov 10, 2025
- High8.8Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand.Check if you run itEPSS 0.39%Nov 10, 2025
- Critical9.3New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain adminisCheck if you run itEPSS 0.55%Nov 10, 2025
- Medium5.3A weakness has been identified in SourceCodester Farm Management System 1.0.Check if you run itEPSS 0.34%Nov 10, 2025
- Medium6.9A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.Check if you run itEPSS 0.47%Nov 10, 2025
- Medium5.3A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.Check if you run itEPSS 0.37%Nov 10, 2025
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to peCheck if you run itEPSS 0.21%Nov 10, 2025
- High7.1The patient prescription viewing functionality in his_doc_view_single_patient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability.Check if you run itEPSS 0.24%Nov 10, 2025
- Medium6.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.Check if you run itEPSS 0.41%Nov 10, 2025
- Medium6.5A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET (Supervisor-mode Exception Return) instruction fails to correctly transition theCheck if you run itEPSS 0.33%Nov 10, 2025
- Medium6.5KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scaCheck if you run itEPSS 0.34%Nov 10, 2025
- High7.5TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function.Check if you run itEPSS 0.40%Nov 10, 2025
Sort