Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A flaw has been found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.20%Apr 10, 2026
- Medium6.9A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.26%Apr 10, 2026
- Medium4.8A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.21%Apr 10, 2026
- Medium5.3A vulnerability was found in code-projects Online Library Management System 1.0.Check if you run itEPSS 0.27%Apr 10, 2026
- Medium5.3A vulnerability has been found in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.22%Apr 10, 2026
- Medium6.9A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.Check if you run itEPSS 0.65%Apr 10, 2026
- Medium4.3The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to Improper Access Control in all versions up to, and incCheck if you run itEPSS 0.30%Apr 10, 2026
- Medium6.1The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpr_pending_template' parameter in all versions up to, andCheck if you run itEPSS 0.28%Apr 10, 2026
- High8.1The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9.Check if you run itEPSS 0.42%Apr 10, 2026
- Medium4.3The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4.Check if you run itEPSS 0.18%Apr 10, 2026
- Medium6.4The Webling plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.9.0 due to insufficient input sanitization, insufficient outpuCheck if you run itEPSS 0.28%Apr 10, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the and functions in all versions up to, and incluCheck if you run itEPSS 0.39%Apr 10, 2026
- High7.5The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.64%Apr 10, 2026
- Medium5.3The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0.Check if you run itEPSS 0.69%Apr 10, 2026
- Medium5.4The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability checks in the function in in all versions up to, and including,Check if you run itEPSS 0.43%Apr 10, 2026
- High7.8Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.Check if you run itEPSS 0.18%Apr 10, 2026
- High8.9A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.84%Apr 10, 2026
- Critical9.3A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.84%Apr 10, 2026
- Critical9.3A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.85%Apr 10, 2026
- Critical9.3A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.85%Apr 10, 2026
- Critical9.3A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.84%Apr 10, 2026
- High8.7A vulnerability was determined in Tenda F451 1.0.0.7.Check if you run itEPSS 0.52%Apr 10, 2026
- Medium5.4OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevantCheck if you run itEPSS 0.22%Apr 10, 2026
- High8.1An issue was discovered in musl libc 0.7.10 through 1.2.6.Check if you run itEPSS 0.17%Apr 10, 2026
- Critical9.8SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.Check if you run itEPSS 0.33%Apr 10, 2026
Sort