Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.45%Aug 25, 2025
- Medium5.3A vulnerability was identified in GreenCMS up to 2.3.0603.Check if you run itEPSS 0.35%Aug 25, 2025
- High8.7PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.83%Aug 25, 2025
- Medium5.1A vulnerability was found in HuangDou UTCMS 9.Check if you run itEPSS 0.36%Aug 25, 2025
- Medium6.3A vulnerability has been found in HuangDou UTCMS 9.Check if you run itEPSS 0.43%Aug 25, 2025
- Medium5.3A flaw has been found in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.33%Aug 25, 2025
- Medium5.3A vulnerability was detected in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.34%Aug 25, 2025
- High8.5phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.Check if you run itEPSS 0.29%Aug 25, 2025
- Medium6.5phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter.Check if you run itEPSS 0.27%Aug 25, 2025
- High8.8FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article.Check if you run itEPSS 0.49%Aug 25, 2025
- Medium5.4File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller.Check if you run itEPSS 0.21%Aug 25, 2025
- Critical9.8Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php componentCheck if you run itEPSS 0.78%Aug 25, 2025
- High8.6Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP ObjectCheck if you run itEPSS 0.73%Aug 25, 2025
- Medium6.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.49%Aug 24, 2025
- Medium5.3A weakness has been identified in givanz Vvveb up to 1.0.7.2.Check if you run itEPSS 0.50%Aug 24, 2025
- Medium5.3A vulnerability was found in DCN DCME-720 9.1.5.11.Check if you run itEPSS 7.69%Aug 24, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- High8.1The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions upCheck if you run itEPSS 0.65%Aug 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unpluggedCheck if you run itEPSS 0.17%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recovery The existing PowerNV hotplug code did not handle surpriseCheck if you run itEPSS 0.17%Aug 22, 2025
- High7.8An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalaCheck if you run itEPSS 0.19%Aug 22, 2025
- Medium6.9Phproject is a high performance full-featured project management system.Check if you run itEPSS 0.40%Aug 21, 2025
- Medium5.1A vulnerability was detected in SourceCodester Advanced School Management System 1.0.Check if you run itEPSS 0.29%Aug 21, 2025
- Medium6.9A weakness has been identified in SourceCodester Online Bank Management System 1.0.Check if you run itEPSS 0.44%Aug 21, 2025
- Critical9.8The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5.Check if you run itEPSS 0.62%Aug 21, 2025