Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP ObjectCheck this weekEPSS 73.00%Aug 25, 2025
- Medium6.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.Check this weekEPSS 49.00%Aug 24, 2025
- Medium5.3A weakness has been identified in givanz Vvveb up to 1.0.7.2.Check this weekEPSS 50.00%Aug 24, 2025
- Medium5.3A vulnerability was found in DCN DCME-720 9.1.5.11.Check if you run itEPSS 7.69%Aug 24, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- High8.1The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions upCheck this weekEPSS 65.00%Aug 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unpluggedCheck this weekEPSS 17.00%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recovery The existing PowerNV hotplug code did not handle surpriseCheck this weekEPSS 17.00%Aug 22, 2025
- High7.8An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalaCheck this weekEPSS 19.00%Aug 22, 2025
- Medium6.9Phproject is a high performance full-featured project management system.Check this weekEPSS 41.00%Aug 21, 2025
- Medium5.1A vulnerability was detected in SourceCodester Advanced School Management System 1.0.Check this weekEPSS 29.00%Aug 21, 2025
- Medium6.9A weakness has been identified in SourceCodester Online Bank Management System 1.0.Check this weekEPSS 44.00%Aug 21, 2025
- Critical9.8The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5.Check this weekEPSS 59.00%Aug 21, 2025
- Medium5.4MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component.Check this weekEPSS 26.00%Aug 21, 2025
- UnknownNews & Blog Designer Pack Plugin 'bdp_get_more_post' Function VulnerabilityPatch nowKEVEPSS 4.26%Aug 21, 2025
- Medium6.9A vulnerability was determined in Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f.Check this weekEPSS 34.00%Aug 20, 2025
- Medium5.1A vulnerability was found in CodeAstro Ecommerce Website 1.0.Check this weekEPSS 31.00%Aug 20, 2025
- Medium5.3A vulnerability has been found in Portabilis i-Educar up to 2.10.Check this weekEPSS 40.00%Aug 20, 2025
- Critical9.3FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface.Check if you run itEPSS 1.52%Aug 20, 2025
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Check if you run itEPSS 7.00%Aug 20, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dahz Kitring kitring allows PHP Local File Inclusion.This iCheck this weekEPSS 67.00%Aug 20, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Anotte anotte-wp allows PHP Local File Inclusion.Check this weekEPSS 65.00%Aug 20, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cpt allows PHP Local File InclusiCheck this weekEPSS 67.00%Aug 20, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Uxper Booking uxper-booking allows PHP Local File IncCheck this weekEPSS 84.00%Aug 20, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issueCheck this weekEPSS 93.00%Aug 20, 2025