Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Re…Check if you run itEPSS 0.42%Mar 4, 2026
- Medium5.3A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver…Check if you run itEPSS 0.66%Mar 4, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.68%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block.Check if you run itEPSS 0.23%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the "Legacy Form" block.Check if you run itEPSS 0.24%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via…Check if you run itEPSS 0.24%Mar 4, 2026
- Low2.3Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads t…Check if you run itEPSS 0.24%Mar 4, 2026
- High8.9Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter.Check if you run itEPSS 0.69%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without pro…Check if you run itEPSS 0.23%Mar 4, 2026
- Medium4.4The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.9 due to insuffic…Check if you run itEPSS 0.27%Mar 4, 2026
- Medium4.4The Taskbuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.3 due to insufficient in…Check if you run itEPSS 0.29%Mar 4, 2026
- Medium5.3The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'get_customer_list' route in all versions u…Check if you run itEPSS 0.91%Mar 4, 2026
- High7.2The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpb_user_name' and 'wpb_user_email' parameters in all versions up to, and inclu…Check if you run itEPSS 0.36%Mar 4, 2026
- Medium6.5The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9…Check if you run itEPSS 0.41%Mar 4, 2026
- High7.2The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and…Check if you run itEPSS 0.34%Mar 4, 2026
- High8.3Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass.Check if you run itEPSS 0.39%Mar 3, 2026
- High8.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check this weekEPSS 35.10%Mar 3, 2026
- High7.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.30%Mar 3, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 5.48%Mar 3, 2026
- High7.5joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.Check if you run itEPSS 0.46%Mar 3, 2026
- High8.6BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.29%Mar 3, 2026
- High8.4OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.24%Mar 3, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.Check if you run itEPSS 1.06%Mar 3, 2026
- Medium4.3HomeBox is a home inventory and organization system.Check if you run itEPSS 0.21%Mar 3, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 0.93%Mar 3, 2026
Sort