Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Check if you run itEPSS 0.94%Mar 24, 2026
- High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.56%Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 2.09%Mar 24, 2026
- High8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.Check if you run itEPSS 0.34%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.30%Mar 24, 2026
- High8.8Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id'…Check if you run itEPSS 0.33%Mar 24, 2026
- Medium6.9phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current…Check if you run itEPSS 0.57%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by su…Check if you run itEPSS 0.91%Mar 24, 2026
- Critical9.1The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38.Check if you run itEPSS 0.72%Mar 24, 2026
- Medium6.5The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and inc…Check if you run itEPSS 0.48%Mar 24, 2026
- Low2.9Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in visualfc liteide (liteidex/src/3rdparty/qjsonrpc/src/http-parser modules).Check if you run itEPSS 0.33%Mar 24, 2026
- Medium5.5A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00.Check if you run itEPSS 0.51%Mar 24, 2026
- High8.6Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a b…Check if you run itEPSS 1.22%Mar 24, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.50%Mar 24, 2026
- Medium6.5The Go MCP SDK used Go's standard encoding/json.Check if you run itEPSS 0.21%Mar 24, 2026
- High8.7Salvo is a Rust web framework.Check if you run itEPSS 0.52%Mar 24, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.61%Mar 24, 2026
- UnknownQualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 14.31%Mar 24, 2026
- Medium4.3The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() function i…Check if you run itEPSS 0.34%Mar 23, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized deletion of quiz question answers due to a missing capability check in the del…Check if you run itEPSS 0.34%Mar 23, 2026
- Medium6.5The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5.Check if you run itEPSS 0.32%Mar 23, 2026
- Medium6.8Connect-CMS is a content management system.Check if you run itEPSS 0.46%Mar 23, 2026
- Critical9.3Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.Check if you run itEPSS 0.40%Mar 23, 2026