Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.Check if you run itEPSS 0.38%Mar 16, 2026
- High8.6Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email a…Check if you run itEPSS 0.39%Mar 16, 2026
- High8.8Runtipi is a personal homeserver orchestrator.Check if you run itEPSS 0.53%Mar 16, 2026
- Low2.7AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.34%Mar 16, 2026
- High7.5AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.42%Mar 16, 2026
- High8.2Pigeon is a message board/notepad/social system/blog.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to sp…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker t…Check if you run itEPSS 0.38%Mar 16, 2026
- Medium6.9Raytha CMS does not have any brute force protection mechanism implemented.Check if you run itEPSS 0.39%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.12%Mar 16, 2026
- High8.7Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot witho…Check if you run itEPSS 0.72%Mar 16, 2026
- Medium5.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system c…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.Check if you run itEPSS 0.40%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated a…Check if you run itEPSS 0.67%Mar 16, 2026
- Medium6.9Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages.Check if you run itEPSS 0.16%Mar 16, 2026
- High8.7Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipula…Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.1ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting…Check if you run itEPSS 0.26%Mar 16, 2026
- Medium6.8ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofin…Check if you run itEPSS 0.15%Mar 16, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters v…Check if you run itEPSS 0.57%Mar 16, 2026
- Medium5.3ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into v…Check if you run itEPSS 0.21%Mar 16, 2026
- High8.8RealtyScript 4.0.2 Multiple Time-based Blind SQL InjectionCheck if you run itEPSS 0.42%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.21%Mar 15, 2026