Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality.Check if you run itEPSS 1.52%Aug 13, 2025
- Critical10.0myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code.Check if you run itEPSS 2.85%Aug 13, 2025
- Medium6.9A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0.Check if you run itEPSS 0.44%Aug 13, 2025
- Medium6.9A vulnerability has been found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.43%Aug 13, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Water Billing System 1.0.Check if you run itEPSS 0.43%Aug 13, 2025
- Medium6.9A vulnerability was determined in code-projects Job Diary 1.0.Check if you run itEPSS 0.46%Aug 13, 2025
- Medium6.9A vulnerability was found in code-projects Job Diary 1.0.Check if you run itEPSS 0.46%Aug 13, 2025
- Medium6.9A vulnerability has been found in code-projects Job Diary 1.0.Check if you run itEPSS 0.46%Aug 13, 2025
- Medium4.8A vulnerability was found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.33%Aug 13, 2025
- Medium5.3A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4.Check if you run itEPSS 0.35%Aug 13, 2025
- Critical9.8The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserializationCheck if you run itEPSS 1.30%Aug 13, 2025
- Critical9.8LatePoint WordPress Plugin Layout Parameter VulnerabilityPatch nowKEVEPSS 0.57%Aug 13, 2025
- Medium6.5A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive.Check if you run itEPSS 0.31%Aug 13, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafCheck if you run itEPSS 0.31%Aug 13, 2025
- Critical9.4WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.Check if you run itEPSS 0.54%Aug 12, 2025
- Medium5.1savg-sanitizer is a PHP SVG/XML sanitizer.Check if you run itEPSS 0.45%Aug 12, 2025
- Critical9.1Kanboard is project management software that focuses on the Kanban methodology.Check if you run itEPSS 0.94%Aug 12, 2025
- High8.1The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versionsCheck if you run itEPSS 0.86%Aug 12, 2025
- Critical9.3Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php.Check if you run itEPSS 1.65%Aug 11, 2025
- Critical9.3PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php.Check if you run itEPSS 1.71%Aug 11, 2025
- Medium5.3A vulnerability was identified in code-projects eBlog Site 1.0.Check if you run itEPSS 0.35%Aug 11, 2025
- Medium6.9A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0.Check if you run itEPSS 0.44%Aug 10, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9.Check if you run itEPSS 0.32%Aug 9, 2025
- Medium5.1A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9.Check if you run itEPSS 0.32%Aug 9, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06.Check if you run itEPSS 0.48%Aug 9, 2025