Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.0Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget…EPSS 0.4%Mar 5, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.…EPSS 0.5%Mar 5, 2026
- Critical9.4Craft is a content management system (CMS).EPSS 0.6%Mar 4, 2026
- High8.1A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Ke…EPSS 0.3%Mar 4, 2026
- High7.8Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.EPSS 0.2%Mar 4, 2026
- High8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.EPSS 1.3%Mar 3, 2026
- High8.8An issue was discovered in Nokia Impact before Mobile 23_FP1.EPSS 0.2%Mar 3, 2026
- Critical9.8Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.EPSS 1.3%Mar 3, 2026
- High8.8AFFiNE is an open-source, all-in-one workspace and an operating system.EPSS 0.6%Mar 2, 2026
- High8.8The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_A…EPSS 1.1%Mar 2, 2026
- Critical9.8An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi.EPSS 1.8%Mar 2, 2026
- Critical9.8An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.EPSS 1.2%Mar 2, 2026
- High7.2sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php.EPSS 0.7%Mar 2, 2026
- Critical9.8An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.EPSS 2.2%Mar 2, 2026
- Low2.1A vulnerability was detected in itsourcecode University Management System 1.0.Mar 2, 2026
- Medium5.5A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5.Mar 2, 2026
- Low1.9A vulnerability was detected in PHPGurukul Student Record Management System 1.0.Mar 2, 2026
- Low1.9A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0.Mar 2, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.KEVEPSS 2.5%Mar 1, 2026
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).EPSS 0.8%Feb 27, 2026
- High8.8Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows…EPSS 0.7%Feb 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection.EPSS 0.4%Feb 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection.EPSS 0.4%Feb 27, 2026
- Low2.1A weakness has been identified in SourceCodester Doctor Appointment System 1.0.EPSS 0.5%Feb 27, 2026
- High7.8An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java componentFeb 26, 2026