Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, and idU parameCheck if you run itEPSS 0.15%Mar 6, 2026
- High8.7AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port.Check if you run itEPSS 0.39%Mar 6, 2026
- Medium5.3Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting craftedCheck if you run itEPSS 0.26%Mar 6, 2026
- High8.8Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the seaCheck if you run itEPSS 0.27%Mar 6, 2026
- High7.1Galaxy Forces MMORPG 0.5.8 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'typCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.7EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory.Check if you run itEPSS 0.31%Mar 6, 2026
- High8.8BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rollno and usernaCheck if you run itEPSS 0.29%Mar 6, 2026
- High7.12-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.phCheck if you run itEPSS 0.52%Mar 6, 2026
- High8.8Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries by injecting malicious code through the txtCustomerCCheck if you run itEPSS 0.26%Mar 6, 2026
- Medium4.3Missing Authorization vulnerability in Rank Math Rank Math SEO PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO PRO: froCheck if you run itEPSS 0.21%Mar 6, 2026
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20.Check if you run itEPSS 0.29%Mar 6, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pascal Birchler Preferred Languages allows DOM-Based XSS.This issue affCheck if you run itEPSS 0.20%Mar 6, 2026
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.23%Mar 6, 2026
- High7.5The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non sCheck if you run itEPSS 0.15%Mar 6, 2026
- Medium5.1An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API.Check if you run itEPSS 0.28%Mar 6, 2026
- Critical9.8An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions.Check if you run itEPSS 0.98%Mar 6, 2026
- Critical9.4An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement.Check if you run itEPSS 0.73%Mar 6, 2026
- High7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.Check if you run itEPSS 0.70%Mar 6, 2026
- Medium6.1The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in allCheck if you run itEPSS 0.25%Mar 6, 2026
- Critical9.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.70%Mar 6, 2026
- Medium5.7SiYuan is a personal knowledge management system.Check if you run itEPSS 0.37%Mar 6, 2026
- Medium4.3melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.26%Mar 6, 2026
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.61%Mar 6, 2026
- Medium6.9Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Patch nowKEVEPSS 3.05%Mar 6, 2026
Sort