Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.42%Sep 19, 2025
- Low1.8SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalCheck if you run itEPSS 0.12%Sep 18, 2025
- Low2.0A vulnerability has been found in SeaCMS up to 13.3.Check if you run itEPSS 0.41%Sep 18, 2025
- Medium6.7NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to accessCheck if you run itEPSS 0.15%Sep 17, 2025
- High7.7Dragonfly is an open source P2P-based file distribution and image acceleration system.Open the advisorySep 17, 2025
- Medium5.4The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.13%Sep 17, 2025
- Medium4.3The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.20%Sep 17, 2025
- Medium4.3The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0.Check if you run itEPSS 0.17%Sep 17, 2025
- Medium6.6The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.5 via the enabled_loggers parameter.Check if you run itEPSS 0.80%Sep 17, 2025
- High8.0In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail.Check if you run itEPSS 1.16%Sep 17, 2025
- Critical9.3osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php).Check if you run itEPSS 1.60%Sep 16, 2025
- Medium5.4A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application.Check if you run itEPSS 0.18%Sep 16, 2025
- Critical9.8An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login functionCheck if you run itEPSS 0.56%Sep 16, 2025
- Medium5.4code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in tCheck if you run itEPSS 0.17%Sep 16, 2025
- Medium5.3A flaw has been found in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.43%Sep 15, 2025
- Medium6.9A vulnerability was detected in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.53%Sep 15, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration.Check if you run itEPSS 0.48%Sep 15, 2025
- Medium6.6FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.46%Sep 15, 2025
- Medium6.3FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.44%Sep 15, 2025
- Medium6.9A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 15, 2025
- Medium4.6Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7Check if you run itEPSS 0.23%Sep 15, 2025
- Medium4.8A vulnerability was identified in IbuyuCMS up to 2.6.3.Check if you run itEPSS 0.27%Sep 15, 2025
- Medium5.3A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0.Check if you run itEPSS 0.32%Sep 15, 2025
- Medium5.3A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.39%Sep 15, 2025
- Medium5.3A flaw has been found in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.39%Sep 15, 2025