Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in delete_module.php that allows authenticated attackers to inject arbitrary Ja…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in db_loader.php that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.21%May 21, 2026
- Medium6.5Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.31%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript b…Check if you run itEPSS 0.17%May 21, 2026
- Critical9.8Deserialization of untrusted data in Apache Fory PyFory.Check if you run itEPSS 0.57%May 21, 2026
- High8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations.Check if you run itEPSS 0.31%May 21, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection.Check if you run itEPSS 0.24%May 21, 2026
- Medium6.2Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a…Check if you run itEPSS 0.13%May 21, 2026
- Medium6.3Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force.Check if you run itEPSS 0.18%May 21, 2026
- Medium5.7Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking.Check if you run itEPSS 0.18%May 21, 2026
- High7.8A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.30%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.25%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.21%May 21, 2026
- High7.8An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.25%May 21, 2026
- High8.4Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote…Check if you run itEPSS 1.70%May 21, 2026
- High7.8An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affec…Check if you run itEPSS 0.29%May 21, 2026
- High7.8A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.32%May 21, 2026
- High7.0A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privile…Check if you run itEPSS 0.30%May 21, 2026
- High7.8An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.36%May 21, 2026
- High7.8An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.Check if you run itEPSS 0.34%May 21, 2026
Sort