Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4CubeCart is an ecommerce software solution.Check if you run itEPSS 0.30%Sep 22, 2025
- High7.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.21%Sep 22, 2025
- Medium6.9A weakness has been identified in itsourcecode Online Discussion Forum 1.0.Check if you run itEPSS 0.48%Sep 22, 2025
- Medium6.9A vulnerability was identified in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- High8.1The txtai framework allows the loading of compressed tar files as embedding indices.Check if you run itEPSS 0.46%Sep 22, 2025
- Medium6.9A vulnerability was determined in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium6.9A vulnerability was found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- High8.7A security vulnerability has been detected in D-Link DIR-513 A1FW110.Check if you run itEPSS 3.32%Sep 22, 2025
- Medium6.9A weakness has been identified in code-projects Online Bidding System 1.0.Check if you run itEPSS 0.59%Sep 22, 2025
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd.Check if you run itEPSS 0.41%Sep 22, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0.Check if you run itEPSS 0.48%Sep 22, 2025
- Medium4.7The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site ScriCheck if you run itEPSS 0.23%Sep 22, 2025
- Medium4.7The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site ScriCheck if you run itEPSS 0.23%Sep 22, 2025
- Medium4.7The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow usersCheck if you run itEPSS 0.23%Sep 22, 2025
- Medium6.9A weakness has been identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- High8.7A vulnerability was found in D-Link DCS-935L up to 1.13.01.Check if you run itEPSS 0.91%Sep 22, 2025
- Medium5.3A flaw has been found in JSC R7 R7-Office Document Server up to 20250820.Check if you run itEPSS 0.43%Sep 22, 2025
- Medium5.1A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117.Check if you run itEPSS 3.98%Sep 22, 2025
- High8.8The LB-Link routers, including the BL-AC2100_AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000_AE4 v2.4.9, BL-AC1900_AZ2 v1.0.2, BL-X26_AC8 v1.2.8, and BL-LTE300_DA4 V1.2.3 models, are vulneCheck if you run itEPSS 1.17%Sep 22, 2025
- High8.8Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to elevate their privileges by assigning themselves as adminCheck if you run itEPSS 0.30%Sep 22, 2025
- Critical9.8Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authCheck if you run itEPSS 0.53%Sep 22, 2025
- Critical9.8AiKaan Cloud Controller uses a single hardcoded SSH private key and the username for remote terminal access to all managed IoT/edge devices.Check if you run itEPSS 0.42%Sep 22, 2025
- Critical9.8The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990.Check if you run itEPSS 0.55%Sep 22, 2025
- High7.5The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which accepts unauthenticated plaintext commands for controlling streaming, recording, forCheck if you run itEPSS 0.28%Sep 22, 2025
Sort