Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that limits recursive entity decoding to 5 iterations,…Check if you run itEPSS 0.19%May 15, 2026
- High7.7phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting mal…Check if you run itEPSS 0.26%May 15, 2026
- High8.7Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.30%May 15, 2026
- Medium5.3Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.32%May 15, 2026
- Medium5.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.29%May 15, 2026
- Critical9.3phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id…Check if you run itEPSS 0.43%May 15, 2026
- Medium5.3phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordinary users to access administrative endpoi…Check if you run itEPSS 0.21%May 15, 2026
- High7.0phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCE_DELETE permission to delete arbitrary directories.Check if you run itEPSS 0.27%May 15, 2026
- Medium5.3phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIsAuthenticated() instead of userHasPermission(CO…Check if you run itEPSS 0.26%May 15, 2026
- High7.5Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.26%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.28%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.28%May 15, 2026
- Medium6.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.28%May 15, 2026
- Medium5.1Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScrip…Check if you run itEPSS 0.19%May 15, 2026
- Medium5.1PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths…Check if you run itEPSS 0.21%May 15, 2026
- High8.8PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated att…Check if you run itEPSS 0.27%May 15, 2026
- Critical9.3WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerou…Check if you run itEPSS 0.60%May 15, 2026
- High8.7Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension pa…Check if you run itEPSS 0.71%May 15, 2026
- Medium5.1Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by injecting malicious payloads into markdown files…Check if you run itEPSS 0.47%May 15, 2026
- Medium5.1Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTM…Check if you run itEPSS 0.24%May 15, 2026
- High8.7WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batched GraphQ…Check if you run itEPSS 0.45%May 15, 2026
- Medium5.3CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files.Check if you run itEPSS 0.24%May 15, 2026
- High7.5Trog::TOTP versions before 1.006 for Perl generate secrets using rand.Check if you run itEPSS 0.32%May 15, 2026
- High8.7radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid…Check if you run itEPSS 0.63%May 15, 2026
- Medium5.5Microsoft APM is an open-source, community-driven dependency manager for AI agents.Check if you run itEPSS 0.45%May 15, 2026
Sort