Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.Check if you run itEPSS 0.37%Mar 19, 2026
- High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.Check if you run itEPSS 0.58%Mar 19, 2026
- Critical10.0A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying syst…Check this weekEPSS 28.67%Mar 19, 2026
- Medium5.1Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attacCheck if you run itEPSS 0.44%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Check if you run itEPSS 1.48%Mar 19, 2026
- Critical9.1A flaw was found in libsoup.Check if you run itEPSS 0.44%Mar 19, 2026
- Medium6.5A flaw was found in libarchive.Check if you run itEPSS 0.32%Mar 19, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCheck if you run itEPSS 1.29%Mar 19, 2026
- High8.7BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authentCheck this weekEPSS 34.36%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticatedCheck this weekEPSS 12.92%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackCheck this weekEPSS 17.43%Mar 19, 2026
- Medium6.9bmc footprints Missing Authentication for Critical FunctionPatch nowKEVEPSS 45.30%Mar 19, 2026
- High8.1NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Check if you run itEPSS 0.61%Mar 19, 2026
- High8.6Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SS…Check if you run itEPSS 0.34%Mar 19, 2026
- Critical9.1CRL Distribution Point Scope Check Logic Error in AWS-LCCheck if you run itEPSS 0.26%Mar 19, 2026
- Medium6.5Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0.Check if you run itEPSS 0.36%Mar 19, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to,Check if you run itEPSS 0.32%Mar 19, 2026
- Critical9.8XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack.Check if you run itEPSS 0.57%Mar 19, 2026
- High7.5XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.Check if you run itEPSS 0.63%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms Pro allows Stored XSS.This issue affects…Check if you run itEPSS 0.15%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Howard Website LLMs.txt website-llms-txt allows Reflected XS…Check if you run itEPSS 0.15%Mar 19, 2026
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor mobile-app-editor allows Upload a Web Shell to a Web Server.This issue affect…Check if you run itEPSS 0.29%Mar 19, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.Check if you run itEPSS 0.31%Mar 19, 2026
- High7.5Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting I…Check if you run itEPSS 0.25%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks allows Reflected XSS.…Check if you run itEPSS 0.15%Mar 19, 2026
Sort