Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.49%Sep 15, 2025
- Medium6.9A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0.Check if you run itEPSS 0.46%Sep 15, 2025
- High8.1SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as adminCheck if you run itEPSS 0.43%Sep 15, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.45%Sep 14, 2025
- Medium6.9A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.41%Sep 14, 2025
- High7.1Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.48%Sep 14, 2025
- Medium6.9A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.47%Sep 14, 2025
- Medium5.3A security flaw has been discovered in CRMEB up to 5.6.1.Check if you run itEPSS 0.40%Sep 14, 2025
- High8.7A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1.Check if you run itEPSS 4.32%Sep 14, 2025
- Unknownsigb pmb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.17%Sep 14, 2025
- Medium6.9A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11.Check if you run itEPSS 0.36%Sep 13, 2025
- High7.2The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the prepare_items function in alCheck if you run itEPSS 0.73%Sep 12, 2025
- Medium5.1Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA through update 92, 7.3 GA throughCheck if you run itEPSS 0.24%Sep 12, 2025
- Low2.3A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2.Check if you run itEPSS 0.24%Sep 12, 2025
- Critical9.3The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application.Check if you run itEPSS 6.17%Sep 12, 2025
- Critical9.3The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application.Check if you run itEPSS 5.64%Sep 12, 2025
- High7.5A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field.Check if you run itEPSS 1.26%Sep 12, 2025
- Medium4.3An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated usersCheck if you run itEPSS 0.34%Sep 12, 2025
- Low3.5The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least theCheck if you run itEPSS 0.18%Sep 12, 2025
- High7.2The LWS Cleaner plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'lws_cl_delete_file' function in all versions up to, aCheck if you run itEPSS 0.80%Sep 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated usersCheck if you run itEPSS 0.49%Sep 12, 2025
- Medium6.1The Ultimate Blogroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.15%Sep 12, 2025
- Medium6.1The Side Slide Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%Sep 12, 2025
- High8.0An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password.Check if you run itEPSS 0.59%Sep 12, 2025
- Medium5.3A vulnerability was detected in FoxCMS up to 1.24.Check if you run itEPSS 0.37%Sep 11, 2025