Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.6SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).Check if you run itEPSS 0.14%Mar 22, 2026
- High8.8SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of…Check if you run itEPSS 0.24%Mar 22, 2026
- Medium6.1SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.Check if you run itEPSS 0.14%Mar 22, 2026
- Medium5.5A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0.Check if you run itEPSS 0.46%Mar 22, 2026
- Medium6.9A weakness has been identified in Free5GC 4.1.0.Check if you run itEPSS 0.43%Mar 22, 2026
- Medium6.9ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash the application by supplying a…Check if you run itEPSS 0.19%Mar 22, 2026
- Medium6.9BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplyin…Check if you run itEPSS 0.17%Mar 22, 2026
- Medium6.9BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the appl…Check if you run itEPSS 0.18%Mar 22, 2026
- Medium6.9Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field.Check if you run itEPSS 0.18%Mar 22, 2026
- Medium6.9Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field.Check if you run itEPSS 0.18%Mar 22, 2026
- Medium6.9RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplyin…Check if you run itEPSS 0.19%Mar 22, 2026
- Medium6.9RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by submitting excessively long input.Check if you run itEPSS 0.18%Mar 22, 2026
- Low1.9A security flaw has been discovered in apconw Aix-DB up to 1.2.3.Check if you run itEPSS 0.14%Mar 22, 2026
- High7.4A vulnerability was identified in D-Link DHP-1320 1.00WWB04.Check if you run itEPSS 0.66%Mar 21, 2026
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.43%Mar 21, 2026
- Medium5.5A vulnerability was determined in trueleaf ApiFlow 0.9.7.Check if you run itEPSS 0.30%Mar 21, 2026
- Low2.3A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308.Check if you run itEPSS 0.30%Mar 21, 2026
- High7.1i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php.Check if you run itEPSS 0.38%Mar 21, 2026
- High8.8i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.36%Mar 21, 2026
- High8.8ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.Check if you run itEPSS 0.33%Mar 21, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.Check if you run itEPSS 1.11%Mar 21, 2026
- High8.8phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idn…Check if you run itEPSS 0.38%Mar 21, 2026
- Medium6.8SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in…Check if you run itEPSS 0.90%Mar 21, 2026
- High8.8Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.34%Mar 21, 2026
- High8.8SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.34%Mar 21, 2026
Sort