Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint.Check if you run itEPSS 0.83%Sep 22, 2025
- Medium6.8The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability.Check if you run itEPSS 0.33%Sep 22, 2025
- Critical9.8The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977.Check if you run itEPSS 0.53%Sep 22, 2025
- High8.8Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation.Check if you run itEPSS 0.49%Sep 22, 2025
- High8.8The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package.Check if you run itEPSS 0.35%Sep 22, 2025
- High7.5Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get.Check if you run itEPSS 0.40%Sep 22, 2025
- Medium5.4Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability within the Products module available to authenticatCheck if you run itEPSS 0.26%Sep 22, 2025
- Medium5.4A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.26%Sep 22, 2025
- Critical9.8A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.48%Sep 22, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- Low2.0A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2.Check if you run itEPSS 1.13%Sep 21, 2025
- Medium5.3A vulnerability has been found in h2oai h2o-3 up to 3.46.08.Check if you run itEPSS 0.54%Sep 21, 2025
- Medium5.3A flaw has been found in h2oai h2o-3 up to 3.46.08.Check if you run itEPSS 0.44%Sep 21, 2025
- Critical9.8A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code.Check if you run itEPSS 0.92%Sep 21, 2025
- Medium5.3A weakness has been identified in SeriaWei ZKEACMS up to 4.3.Check if you run itEPSS 0.56%Sep 21, 2025
- Medium5.3A vulnerability was identified in SeriaWei ZKEACMS up to 4.3.Check if you run itEPSS 0.46%Sep 21, 2025
- Medium5.3A vulnerability was determined in academico-sis academico up to d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab.Check if you run itEPSS 0.36%Sep 21, 2025
- Medium5.3A vulnerability was found in kuaifan DooTask up to 1.2.49.Check if you run itEPSS 0.33%Sep 21, 2025
- Medium6.9A vulnerability was detected in Webkul QloApps up to 1.7.0.Check if you run itEPSS 0.35%Sep 21, 2025
- High8.7A weakness has been identified in UTT 1200GW up to 3.0.0-170831.Check if you run itEPSS 1.10%Sep 20, 2025
- Critical9.1Starch versions 0.14 and earlier generate session ids insecurely.Check if you run itEPSS 0.36%Sep 20, 2025
- Medium4.3The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Sep 20, 2025
- Medium6.5The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7.Check if you run itEPSS 0.34%Sep 20, 2025
- Medium4.3The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a mCheck if you run itEPSS 0.20%Sep 20, 2025
- High7.2Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path configuration wh…Check if you run itEPSS 0.64%Sep 19, 2025
Sort