Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in GlCheck if you run itEPSS 0.22%Oct 9, 2025
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in thCheck if you run itEPSS 0.27%Oct 9, 2025
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in thCheck if you run itEPSS 0.27%Oct 9, 2025
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in thCheck if you run itEPSS 0.27%Oct 9, 2025
- Critical9.8The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and including, 2.7.Check if you run itEPSS 0.56%Oct 9, 2025
- Medium5.3A weakness has been identified in code-projects Online Complaint Site 1.0.Check if you run itEPSS 0.38%Oct 9, 2025
- High8.8The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versionsCheck if you run itEPSS 0.32%Oct 9, 2025
- Medium5.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 9.0.46.Check if you run itEPSS 0.19%Oct 9, 2025
- High7.3The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation.Check if you run itEPSS 0.28%Oct 9, 2025
- Critical9.4SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.Check if you run itEPSS 0.38%Oct 9, 2025
- Critical9.6A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript inCheck if you run itEPSS 0.46%Oct 9, 2025
- UnknownD-Link dir-868l_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.82%Oct 9, 2025
- Medium5.3A vulnerability was found in code-projects Voting System 1.0.Check if you run itEPSS 0.40%Oct 8, 2025
- Medium5.1A security vulnerability has been detected in code-projects Voting System 1.0.Check if you run itEPSS 0.45%Oct 8, 2025
- Medium6.9A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Oct 8, 2025
- Medium6.9A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Oct 8, 2025
- Medium6.9A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.48%Oct 8, 2025
- Medium6.9A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.48%Oct 8, 2025
- Medium4.8A vulnerability was determined in SourceCodester Student Grades Management System 1.0.Check if you run itEPSS 0.29%Oct 8, 2025
- Medium5.3The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9.Check if you run itEPSS 0.41%Oct 8, 2025
- High7.2The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and includiCheck if you run itEPSS 0.41%Oct 8, 2025
- Medium4.8A vulnerability was identified in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.26%Oct 8, 2025
- Medium6.9A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0.Check if you run itEPSS 0.52%Oct 8, 2025
- Medium5.1A flaw has been found in code-projects Voting System 1.0.Check if you run itEPSS 0.31%Oct 8, 2025
- High7.2An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated admiCheck if you run itEPSS 0.66%Oct 8, 2025
Sort