Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.Check if you run itEPSS 0.28%Oct 23, 2025
- Medium4.3Moodle failed to verify enrolment status correctly when sending quiz notifications.Check if you run itEPSS 0.23%Oct 23, 2025
- Medium4.3A flaw was found in the course overview output function where user access permissions were not fully enforced.Check if you run itEPSS 0.24%Oct 23, 2025
- High7.1Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total.Check if you run itEPSS 0.38%Oct 23, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POCheck if you run itEPSS 0.21%Oct 23, 2025
- Medium4.8QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form).Check if you run itEPSS 0.19%Oct 23, 2025
- Medium4.8QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form).Check if you run itEPSS 0.19%Oct 23, 2025
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd.Check if you run itEPSS 0.26%Oct 23, 2025
- Medium5.1GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function.Check if you run itEPSS 0.20%Oct 23, 2025
- Medium4.6Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page.Check if you run itEPSS 0.23%Oct 23, 2025
- Medium4.6Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page.Check if you run itEPSS 0.23%Oct 23, 2025
- High7.1A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover vCheck if you run itEPSS 0.37%Oct 23, 2025
- Medium4.3An issue was discovered in BAE SOCET GXP before 4.6.0.2.Check if you run itEPSS 0.24%Oct 23, 2025
- High8.4An issue was discovered in BAE SOCET GXP before 4.6.0.2.Check if you run itEPSS 0.31%Oct 23, 2025
- Medium6.5FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.Check if you run itEPSS 0.26%Oct 23, 2025
- High7.5Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.Check if you run itEPSS 0.36%Oct 23, 2025
- Medium6.5FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.Check if you run itEPSS 0.26%Oct 23, 2025
- High8.7BookLore is a self-hosted web app for organizing and managing personal book collections.Check if you run itEPSS 0.43%Oct 22, 2025
- Medium6.9VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC.Check if you run itEPSS 1.15%Oct 22, 2025
- Medium6.9FastGPT is an AI Agent building platform.Check if you run itEPSS 0.24%Oct 22, 2025
- High8.2aiomysql is a library for accessing a MySQL database from the asyncio.Check if you run itEPSS 0.39%Oct 22, 2025
- High8.1Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.38%Oct 22, 2025
- Medium5.7OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.32%Oct 22, 2025
- Medium6.4A container privilege escalation flaw was found in certain AMQ Broker images.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.4Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems.Check if you run itEPSS 0.21%Oct 22, 2025
Sort