Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability.Check if you run itEPSS 0.13%Aug 27, 2025
- Critical9.6Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability.Check if you run itEPSS 0.35%Aug 27, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.40%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Payroll Management System 1.0.Check if you run itEPSS 0.53%Aug 27, 2025
- Critical9.4The configuration file containing database logins and passwords is readable by any local user.Check if you run itEPSS 0.13%Aug 27, 2025
- Critical9.0The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session ICheck if you run itEPSS 0.18%Aug 27, 2025
- Critical9.0The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.Check if you run itEPSS 0.18%Aug 27, 2025
- Medium6.3A vulnerability has been found in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.39%Aug 27, 2025
- Medium6.9A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- High8.5Multiple i-フィルター products contain an issue with incorrect default permissions.Check if you run itEPSS 0.15%Aug 27, 2025
- Medium6.9A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaimchaikin Admin Menu Groups admin-menu-groups allows Stored XSS.This issueCheck if you run itEPSS 0.18%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- High7.3In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.Check if you run itEPSS 0.25%Aug 27, 2025
- Medium6.5Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.Check if you run itEPSS 0.25%Aug 27, 2025
- Critical9.8Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that hCheck if you run itEPSS 0.61%Aug 27, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check this weekEPSS 10.11%Aug 27, 2025
- High8.3SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787.Check if you run itEPSS 0.35%Aug 27, 2025
- High8.8O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.Check if you run itEPSS 0.52%Aug 27, 2025
- Medium4.0In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.8In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code.Check if you run itEPSS 0.30%Aug 26, 2025
- Medium5.1Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perfCheck if you run itEPSS 0.32%Aug 26, 2025
- High8.7Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation.Check if you run itEPSS 0.35%Aug 26, 2025
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue.Check if you run itEPSS 0.26%Aug 26, 2025
Sort