Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.34%Apr 30, 2025
- High7.6SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_complaint.Check if you run itEPSS 0.34%Apr 30, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- Medium6.3KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join your organization.Check if you run itEPSS 0.38%Apr 29, 2025
- Medium4.9The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.43%Apr 29, 2025
- Critical10.0YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.65%Apr 29, 2025
- Medium5.3A vulnerability was found in VMSMan up to 20250416.Check if you run itEPSS 0.42%Apr 29, 2025
- Medium5.2Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as apCheck if you run itEPSS 0.17%Apr 29, 2025
- Medium6.9A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical.Check if you run itEPSS 0.64%Apr 29, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0.Check if you run itEPSS 0.64%Apr 29, 2025
- Medium6.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.35%Apr 29, 2025
- Low1.0DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and soCheck if you run itEPSS 0.22%Apr 29, 2025
- Medium6.5A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.Check if you run itEPSS 0.29%Apr 29, 2025
- Medium5.9Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.Check if you run itEPSS 0.45%Apr 29, 2025
- Medium4.3A flaw was found in libsoup.Check if you run itEPSS 0.44%Apr 29, 2025
- High7.5A flaw was found in the mod_auth_openidc module for Apache httpd.Check if you run itEPSS 1.58%Apr 29, 2025
- Medium5.4An access issue was addressed with improved access restrictions.Check if you run itEPSS 0.51%Apr 29, 2025
- UnknownMDaemon Email Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Apr 29, 2025
- High8.8In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/graphql) of Zimbra webmail dueCheck if you run itEPSS 0.31%Apr 29, 2025
- Unknownfiberhome hg6245d_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 27.82%Apr 29, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- Low3.3snowflake-connector-nodejs is a NodeJS driver for Snowflake.Check if you run itEPSS 0.17%Apr 28, 2025
- Low3.3gosnowflake is the Snowflake Golang driver.Check if you run itEPSS 0.14%Apr 28, 2025
- Low3.3snowflake-connector-net is the Snowflake Connector for .NET.Check if you run itEPSS 0.17%Apr 28, 2025
Sort