Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interfacCheck if you run itEPSS 0.71%Aug 19, 2025
- Medium6.5Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function.Check if you run itEPSS 0.26%Aug 19, 2025
- Medium5.3A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin headeCheck if you run itEPSS 0.38%Aug 19, 2025
- Critical10.0Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQCheck if you run itEPSS 0.64%Aug 19, 2025
- UnknownArcserve udp Incorrect AuthorizationPatch nowKEVEPSS 40.03%Aug 19, 2025
- High8.7The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition.Check if you run itEPSS 0.78%Aug 18, 2025
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.32%Aug 18, 2025
- High8.6Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance.Check if you run itEPSS 0.55%Aug 18, 2025
- Critical9.1aiven-db-migrate is an Aiven database migration tool.Check if you run itEPSS 0.62%Aug 18, 2025
- Critical9.1aiven-db-migrate is an Aiven database migration tool.Check if you run itEPSS 0.72%Aug 18, 2025
- High8.5Copier library and CLI app for rendering project templates.Check if you run itEPSS 0.26%Aug 18, 2025
- Medium5.3NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.43%Aug 18, 2025
- Medium6.2IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communCheck if you run itEPSS 0.18%Aug 18, 2025
- Medium5.4IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limCheck if you run itEPSS 0.21%Aug 18, 2025
- Medium5.9IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.Check if you run itEPSS 0.33%Aug 18, 2025
- High7.7An Insecure Direct Object Reference (IDOR) vulnerability was identified in the endpoint of the Lunary API, affecting versions up to 0.8.8.Check if you run itEPSS 0.24%Aug 18, 2025
- Medium4.8Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Check if you run itEPSS 0.25%Aug 18, 2025
- Medium5.9Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.Check if you run itEPSS 2.13%Aug 18, 2025
- High7.1An out-of-bounds write vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.38%Aug 18, 2025
- Medium6.3A security flaw has been discovered in Portabilis i-Diario up to 1.5.0.Check if you run itEPSS 0.42%Aug 18, 2025
- Medium5.1A vulnerability was found in Portabilis i-Diario up to 1.5.0.Check if you run itEPSS 0.31%Aug 18, 2025
- Medium5.1A vulnerability has been found in Portabilis i-Diario up to 1.5.0.Check if you run itEPSS 0.30%Aug 18, 2025
- Medium5.1A flaw has been found in Portabilis i-Diario up to 1.5.0.Check if you run itEPSS 0.30%Aug 18, 2025
- Medium4.8A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android.Check if you run itEPSS 0.23%Aug 18, 2025
- Critical9.8In vowifi service, there is a possible command injection due to improper input validation.Check if you run itEPSS 1.52%Aug 18, 2025
Sort