Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability has been found in itsourcecode Apartment Management System 1.0.Check this weekEPSS 42.00%Aug 28, 2025
- Medium6.9A flaw has been found in itsourcecode Apartment Management System 1.0.Check this weekEPSS 44.00%Aug 28, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check this weekEPSS 51.00%Aug 28, 2025
- High8.7Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface.Check if you run itEPSS 1.74%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ireca ireca allows PHP Local File Inclusion.This iCheck this weekEPSS 53.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kipso kipso allows PHP Local File Inclusion.This issCheck this weekEPSS 54.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ovatheme Events ova-events allows PHP Local File ICheck this weekEPSS 54.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.ThisCheck this weekEPSS 53.00%Aug 28, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion SCheck this weekEPSS 62.00%Aug 28, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodeYatri Gutenify gutenify allows PHP Local File InclusionCheck this weekEPSS 61.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in unfoldwp Magazine eximious-magazine allows PHP Local File ICheck this weekEPSS 54.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpinterface BlogMarks blogmarks allows PHP Local File IncluCheck this weekEPSS 54.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in unfoldwp Magazine Elite magazine-elite allows PHP Local FilCheck this weekEPSS 54.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in unfoldwp Magazine Saga magazine-saga allows PHP Local FileCheck this weekEPSS 53.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeuniver Glamer glamer allows PHP Local File Inclusion.TCheck this weekEPSS 54.00%Aug 28, 2025
- Medium4.3Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issuCheck this weekEPSS 27.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.Check this weekEPSS 53.00%Aug 28, 2025
- Medium6.1The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the WP_Ulike_Pro_File_Uploader class in all versions up toCheck this weekEPSS 21.00%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POSTCheck this weekEPSS 24.00%Aug 28, 2025
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0.Check this weekEPSS 27.00%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0.Check this weekEPSS 24.00%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0.Check this weekEPSS 24.00%Aug 28, 2025
- Medium6.1A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0.Check this weekEPSS 23.00%Aug 28, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check this weekEPSS 40.00%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Payroll Management System 1.0.Check this weekEPSS 53.00%Aug 27, 2025