Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.Check if you run itEPSS 0.35%Aug 7, 2025
- Medium6.1Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters.Check if you run itEPSS 0.20%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters.Check if you run itEPSS 0.35%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php.Check if you run itEPSS 0.35%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters.Check if you run itEPSS 0.35%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.Check if you run itEPSS 0.35%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parametersCheck if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters.Check if you run itEPSS 0.30%Aug 7, 2025
- Medium6.1Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the sessionName parameter at createSessionTerm.php.Check if you run itEPSS 0.20%Aug 7, 2025
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.42%Aug 6, 2025
- High8.7Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API.Check if you run itEPSS 0.54%Aug 6, 2025
- High7.5Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contCheck if you run itEPSS 0.60%Aug 6, 2025
- Critical9.3Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access.Check if you run itEPSS 0.56%Aug 6, 2025
- Low3.5Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Check if you run itEPSS 0.18%Aug 6, 2025
- High7.8Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability.Check if you run itEPSS 0.15%Aug 6, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in SkyworkAI DeepResearchAgent up to 08eb7f8eb9505d0094d75bb97ff7dacc3fa3bbf2.Check if you run itEPSS 1.75%Aug 6, 2025
- Medium5.3A vulnerability was found in Keycloak-services.Check if you run itEPSS 0.53%Aug 6, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user ofCheck if you run itEPSS 0.22%Aug 6, 2025
- Medium4.7An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.Check if you run itEPSS 0.29%Aug 6, 2025
- Medium4.4NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an underflow by a specific model configurationCheck if you run itEPSS 0.51%Aug 6, 2025
- Medium5.9NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request.Check if you run itEPSS 0.77%Aug 6, 2025
- Medium5.9NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by manipulating shared memoCheck if you run itEPSS 0.49%Aug 6, 2025
Sort