Search vulnerabilities

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,824

CVE-2026-49370

YouTrack Information Disclosure via fetchApp Requests

In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests

CVSS 3.1 · 3.4 Low EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2026-10180

TRENDnet TEW-432BRP formSysCmd command injection

A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument sysCmd leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

CVSS 4.0 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Trendnet
Products
Tew-432brp
CVE-2024-12917

Improper Access Control in Agito Computer's Health4All

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-12918

SQLi in Agito Computer's Health4All

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection. This issue affects Health4All: before 10.01.2025.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-12924

Open Redirect in Akinsoft's QR Menu

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Qr Menu
CVE-2024-12925

Host Header Injection in Akinsoft's QR Menu

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Qr Menu
CVE-2024-12970

OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2.

CVSS 3.1 · 3.9 Low EPSS 1.4% KEV · Not listed
Vendors
—
Products
—
CVE-2024-12972

XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS). This issue affects OctoCloud: from s1.09.01 before v1.11.01.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud
CVE-2024-12973

Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud
CVE-2026-49384

Stored XSS Vulnerability in PyCharm Jupyter Notebook Markdown Cells

In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Pycharm
CVE-2024-12974

XSS in Akinsoft's ProKuaför

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting (XSS). This issue affects ProKuaför: from s1.02.07 before v1.02.08.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Prokuaför
CVE-2024-13063

IDOR in Akinsoft's MyRezzta

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Myrezzta
CVE-2026-49385

Access Control Bypass in JetBrains YouTrack

In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2026-49386

Improper Access Control Allowing Enumeration of Restricted Content on Planning Canvas

In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2024-13064

XSS in Akinsoft's MyRezzta

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting (XSS). This issue affects MyRezzta: from s2.02.02 before v2.05.01.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Myrezzta
CVE-2026-10186

code-projects Online Hospital Management System patient.php sql injection

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.php. Such manipulation of the argument editid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Code-projects
Products
Online Hospital Management System
CVE-2024-13065

Business Logic Error in Akinsoft's MyRezzta

Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding. This issue affects MyRezzta: from s2.02.02 before v2.05.01.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Myrezzta
CVE-2024-13066

iFrame Injection in Akinsoft's LimonDesk

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Limondesk
CVE-2024-13068

Host Header Injection in Akinsoft's LimonDesk

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Limondesk
CVE-2024-13175

IDOR in Vidco Software's VOC TESTER

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. This issue affects VOC TESTER: before 12.41.0.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—