Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2.Check if you run itEPSS 0.91%Apr 5, 2026
- Low1.9A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3.Check if you run itEPSS 0.91%Apr 5, 2026
- Medium5.5A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0.Check if you run itEPSS 0.30%Apr 5, 2026
- Low2.1A flaw has been found in griptape-ai griptape 0.19.4.Check if you run itEPSS 0.43%Apr 5, 2026
- High8.1Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Bas…Check if you run itEPSS 0.66%Apr 5, 2026
- Low3.5Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds fro…Check if you run itEPSS 0.22%Apr 5, 2026
- Low2.1A vulnerability was detected in griptape-ai griptape 0.19.4.Check if you run itEPSS 0.20%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the language_tag parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2…Check if you run itEPSS 0.40%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id_to_modify' parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_…Check if you run itEPSS 0.34%Apr 5, 2026
- Critical9.3Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by ex…Check if you run itEPSS 1.44%Apr 5, 2026
- High8.7Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed…Check if you run itEPSS 0.47%Apr 5, 2026
- High8.8OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'where' parameter.Check if you run itEPSS 0.33%Apr 5, 2026
- Medium6.9FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malfo…Check if you run itEPSS 0.18%Apr 5, 2026
- Medium5.3CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms.Check if you run itEPSS 0.14%Apr 5, 2026
- High8.6Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attackers to crash the application and overwrite SEH po…Check if you run itEPSS 0.21%Apr 5, 2026
- High8.8Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou…Check if you run itEPSS 0.40%Apr 5, 2026
- High8.5RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to exec…Check if you run itEPSS 0.33%Apr 5, 2026
- High8.8C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by i…Check if you run itEPSS 0.28%Apr 5, 2026
Sort