Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6OpenEMR is a free and open source electronic health records and medical practice management application.Check this weekEPSS 10.49%May 23, 2025
- High8.7A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18).Check if you run itEPSS 0.65%May 23, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows SQL Injection.ThiCheck if you run itEPSS 0.41%May 23, 2025
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tainacan Tainacan tainacan allows Path Traversal.This issue affects Tainacan: from nCheck if you run itEPSS 0.54%May 23, 2025
- Medium6.3The Intellian C700 web panel allows you to add firewall rules.Check if you run itEPSS 0.46%May 23, 2025
- Medium5.3A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 0.52%May 23, 2025
- High7.2The Solid Mail – SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email Name, Subject, and Body in all versions up to, aCheck if you run itEPSS 0.38%May 23, 2025
- Medium6.9The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation.Check if you run itEPSS 0.17%May 23, 2025
- Critical9.1PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.Check if you run itEPSS 0.31%May 23, 2025
- Medium4.7Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive dataCheck if you run itEPSS 0.21%May 23, 2025
- Medium6.9An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows unauthenticated remote attackersCheck if you run itEPSS 0.53%May 23, 2025
- Medium4.3A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive informationCheck if you run itEPSS 0.34%May 23, 2025
- Medium4.8Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.27%May 23, 2025
- Medium6.5PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailCheck if you run itEPSS 0.42%May 23, 2025
- Medium4.4PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and passCheck if you run itEPSS 0.22%May 23, 2025
- Critical9.8PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php.Check if you run itEPSS 0.50%May 23, 2025
- Low2.9parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.Check if you run itEPSS 0.28%May 23, 2025
- Medium6.9Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device.Check if you run itEPSS 0.24%May 22, 2025
- Medium5.8OpenFGA is an authorization/permission engine.Check if you run itEPSS 0.50%May 22, 2025
- Medium5.5zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.Check if you run itEPSS 0.18%May 22, 2025
- Medium6.6Schule is open-source school management system software.Check if you run itEPSS 0.40%May 22, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input.Check if you run itEPSS 0.26%May 22, 2025
- Medium4.6A reflected cross-site scripting (XSS) vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7.0.0 due to improper input validation.Check if you run itEPSS 0.23%May 22, 2025
- Medium5.3Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%May 22, 2025
- Medium5.8Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%May 22, 2025
Sort