Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.Apr 2, 2026
- Low2.0A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0.Apr 2, 2026
- High7.2The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Cod…EPSS 0.6%Apr 2, 2026
- Low2.1A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0.Apr 2, 2026
- Critical9.8An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.Apr 1, 2026
- Critical9.8There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on component…EPSS 0.5%Apr 1, 2026
- High8.8A flaw was found in libinput.Apr 1, 2026
- Critical9.3MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending cr…Apr 1, 2026
- Low2.1A vulnerability was detected in code-projects Simple Laundry System 1.0.Apr 1, 2026
- Low2.0A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Apr 1, 2026
- Low2.0A security flaw has been discovered in z-9527 admin 1.0/2.0.Apr 1, 2026
- Low2.0A vulnerability was found in gougucms 4.08.18.Apr 1, 2026
- High8.6XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users.Apr 1, 2026
- High8.7XenForo before 2.3.7 does not properly restrict methods callable from within templates.EPSS 0.3%Apr 1, 2026
- Low2.1A security vulnerability has been detected in code-projects BloodBank Managing System 1.0.Apr 1, 2026
- High8.2SiYuan is a personal knowledge management system.Mar 31, 2026
- Critical9.0SiYuan is a personal knowledge management system.Mar 31, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesEPSS 2.6%Mar 31, 2026
- Low1.9A security vulnerability has been detected in SourceCodester Leave Application System 1.0.Mar 31, 2026
- Critical9.2ZEBRA is a Zcash node written entirely in Rust.Mar 31, 2026
- High7.1Ruby LSP is an implementation of the language server protocol for Ruby.Mar 31, 2026
- Critical9.8The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12.Mar 31, 2026
- Low2.1A vulnerability was identified in code-projects Online Food Ordering System 1.0.Mar 31, 2026
- Critical9.8The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to,…Mar 30, 2026