Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authent…Check this weekEPSS 17.43%Mar 19, 2026
- Medium6.9bmc footprints Missing Authentication for Critical FunctionPatch nowKEVEPSS 44.58%Mar 19, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCheck if you run itEPSS 1.26%Mar 19, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all ve…Check if you run itEPSS 0.32%Mar 19, 2026
- High8.6Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SS…Check if you run itEPSS 0.33%Mar 19, 2026
- Medium6.5Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0.Check if you run itEPSS 0.36%Mar 19, 2026
- Critical9.8XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack.Check if you run itEPSS 0.56%Mar 19, 2026
- High7.5XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.Check if you run itEPSS 0.61%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms Pro allows Stored XSS.This issue affects…Check if you run itEPSS 0.15%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Howard Website LLMs.txt website-llms-txt allows Reflected XS…Check if you run itEPSS 0.15%Mar 19, 2026
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor mobile-app-editor allows Upload a Web Shell to a Web Server.This issue affect…Check if you run itEPSS 0.28%Mar 19, 2026
- Critical9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress BuilderPress builderpress allows PHP…Check if you run itEPSS 0.34%Mar 19, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.Check if you run itEPSS 0.31%Mar 19, 2026
- High7.5Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting I…Check if you run itEPSS 0.24%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QantumThemes Kentha kentha allows Reflected XSS.This issue affect…Check if you run itEPSS 0.15%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks allows Reflected XSS.…Check if you run itEPSS 0.15%Mar 19, 2026
- Medium5.4HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspec…Check if you run itEPSS 0.17%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markbeljaars Table of Contents Creator allows Reflected XSS.This…Check if you run itEPSS 0.15%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ArtstudioWorks Brookside allows Reflected XSS.This issue affects…Check if you run itEPSS 0.20%Mar 19, 2026
- Medium6.5Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPSight WPCasa allows DOM-Based XSS.This issue affects WPCasa: fr…Check if you run itEPSS 0.13%Mar 19, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Themeton Finag allows Object Injection.This issue affects Finag: from n/a through 1.5.0.Check if you run itEPSS 0.52%Mar 19, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2.Check if you run itEPSS 0.40%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Reflected XSS…Check if you run itEPSS 0.20%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issu…Check if you run itEPSS 0.15%Mar 19, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.30%Mar 19, 2026
Sort