Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3A vulnerability was found in HybridAuth up to 3.12.2.Check if you run itEPSS 0.19%Mar 23, 2026
- Low2.1A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7.Check if you run itEPSS 0.23%Mar 23, 2026
- High7.7Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces.Check if you run itEPSS 0.35%Mar 23, 2026
- Medium6.8Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaint…Check if you run itEPSS 0.19%Mar 23, 2026
- High7.2Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other…Check if you run itEPSS 0.12%Mar 23, 2026
- High8.7Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined wit…Check if you run itEPSS 0.29%Mar 23, 2026
- High8.5Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service.Check if you run itEPSS 0.45%Mar 23, 2026
- High8.7Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services.Check if you run itEPSS 0.26%Mar 23, 2026
- Critical9.3SQL Injection in Cuantis.Check if you run itEPSS 0.29%Mar 23, 2026
- High8.9A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0.Check if you run itEPSS 4.55%Mar 23, 2026
- Low1.3A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Check if you run itEPSS 0.17%Mar 23, 2026
- High7.5An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutraliza…Check if you run itEPSS 0.45%Mar 23, 2026
- Critical9.8Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi…Check if you run itEPSS 0.56%Mar 23, 2026
- High7.1Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to r…Check if you run itEPSS 0.26%Mar 23, 2026
- High7.6PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.27%Mar 23, 2026
- Medium5.3PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.25%Mar 23, 2026
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.42%Mar 23, 2026
- Low1.3A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Check if you run itEPSS 0.30%Mar 23, 2026
- Medium6.3XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into process…Check if you run itEPSS 0.29%Mar 23, 2026
- Low1.3A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Check if you run itEPSS 0.34%Mar 23, 2026
- Medium5.5A weakness has been identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.37%Mar 23, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.26%Mar 23, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.34%Mar 23, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.44%Mar 23, 2026
- Low1.9A vulnerability was determined in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.27%Mar 23, 2026
Sort