Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.0.6 due to insufficient inputCheck if you run itEPSS 0.24%Aug 29, 2025
- Medium4.3The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Aug 29, 2025
- Medium4.3The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on the lwscache_activatePlugin() function in all versions up to,Check if you run itEPSS 0.25%Aug 29, 2025
- Medium5.5A vulnerability was determined in code-projects Online Event Judging System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Low2.1A vulnerability was found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.39%Aug 29, 2025
- Medium6.9A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019.Check if you run itEPSS 0.38%Aug 29, 2025
- High8.7The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary sCheck if you run itEPSS 0.60%Aug 29, 2025
- High8.7Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.Check if you run itEPSS 0.44%Aug 29, 2025
- Critical9.3Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embeddedCheck if you run itEPSS 0.53%Aug 29, 2025
- Critical9.3TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.Check if you run itEPSS 0.52%Aug 29, 2025
- Low2.1A vulnerability has been found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.39%Aug 29, 2025
- Medium5.3A flaw has been found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.39%Aug 29, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Aug 29, 2025
- Low2.1Telesquare tlr-2005ksh_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.25%Aug 29, 2025
- Critical9.3A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16.Check if you run itEPSS 5.57%Aug 29, 2025
- High7.7NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper privilege checkCheck if you run itEPSS 0.14%Aug 29, 2025
- High8.6There is an Access Control Vulnerability in some HikCentral Professional versions.Check if you run itEPSS 0.46%Aug 29, 2025
- Medium5.3There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions.Check if you run itEPSS 0.34%Aug 29, 2025
- Medium4.7There is a CSV Injection Vulnerability in some HikCentral Master Lite versions.Check if you run itEPSS 0.36%Aug 29, 2025
- Medium6.3A vulnerability was identified in coze-studio up to 0.2.4.Check if you run itEPSS 0.24%Aug 29, 2025
- Medium4.0Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persi…Check if you run itEPSS 0.27%Aug 29, 2025
- Medium5.3A vulnerability was found in Xinhu RockOA up to 2.6.9.Check if you run itEPSS 0.27%Aug 29, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Medium6.9A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
Sort