Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforo_approve_…Check if you run itEPSS 0.30%Feb 28, 2026
- Critical9.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.T…Check if you run itEPSS 0.18%Feb 28, 2026
- Critical9.3Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11…Check if you run itEPSS 0.29%Feb 28, 2026
- High7.5Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.53%Feb 28, 2026
- High7.5The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from…Check if you run itEPSS 0.46%Feb 28, 2026
- Medium6.5The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a s…Check if you run itEPSS 0.22%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 6.27%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter.Check if you run itEPSS 1.07%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 1.28%Feb 27, 2026
- Medium5.4Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.29%Feb 27, 2026
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.50%Feb 27, 2026
- Medium6.5Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.27%Feb 27, 2026
- High8.6Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.43%Feb 27, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability tha…Check if you run itEPSS 0.27%Feb 27, 2026
- Low2.2Vim is an open source, command line text editor.Check if you run itEPSS 0.17%Feb 27, 2026
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 0.21%Feb 27, 2026
- Medium4.4Vim is an open source, command line text editor.Check if you run itEPSS 0.21%Feb 27, 2026
- Medium6.6Vim is an open source, command line text editor.Check if you run itEPSS 0.20%Feb 27, 2026
- Medium5.5Vim is an open source, command line text editor.Check if you run itEPSS 0.26%Feb 27, 2026
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 1.35%Feb 27, 2026
- High8.6Gradio is an open-source Python package designed for quick prototyping.Check if you run itEPSS 7.26%Feb 27, 2026
- Medium4.7Gradio is an open-source Python package designed for quick prototyping.Check if you run itEPSS 0.29%Feb 27, 2026
- High7.5Gradio is an open-source Python package designed for quick prototyping.Patch nowKEVEPSS 3.06%Feb 27, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 2.68%Feb 27, 2026
- High7.2WeGIA is a web manager for charitable institutions.Patch nowKEVEPSS 3.62%Feb 27, 2026
Sort