Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5.Check if you run itEPSS 0.32%Mar 23, 2026
- Medium6.8Connect-CMS is a content management system.Check if you run itEPSS 0.46%Mar 23, 2026
- Critical9.3Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.Check if you run itEPSS 0.40%Mar 23, 2026
- Medium5.4A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2.Check if you run itEPSS 0.20%Mar 23, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.49%Mar 23, 2026
- Critical9.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.57%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.92%Mar 23, 2026
- High7.1A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a pro…Check if you run itEPSS 0.31%Mar 23, 2026
- High8.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%Mar 23, 2026
- High7.5A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS) via se…Check if you run itEPSS 1.65%Mar 23, 2026
- High7.5A NULL pointer dereference in the daap_reply_playlists function (src/httpd_daap.c) of owntone-server commit 3d1652d allows attackers to cause a Denial of Service (DoS)…Check if you run itEPSS 0.61%Mar 23, 2026
- High8.8A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.Check if you run itEPSS 2.50%Mar 23, 2026
- High7.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.42%Mar 23, 2026
- Low1.3A security flaw has been discovered in kalcaddle kodbox 1.64.Check if you run itEPSS 0.20%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.73%Mar 23, 2026
- Medium6.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.35%Mar 23, 2026
- Low2.1A vulnerability was identified in kalcaddle kodbox 1.64.Check if you run itEPSS 0.35%Mar 23, 2026
- Medium6.1Summary When trustProxy is configured with a restrictive trust function (e.g., a specific IP like trustProxy: '10.0.0.1', a subnet, a hop count, or a custom function),…Check if you run itEPSS 0.17%Mar 23, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.53%Mar 23, 2026
- Critical9.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.54%Mar 23, 2026
- High7.2Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other…Check if you run itEPSS 0.17%Mar 23, 2026
- High8.5Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service.Check if you run itEPSS 0.68%Mar 23, 2026
- Low2.1A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 23, 2026
- Low2.1A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 23, 2026
- Low2.1A vulnerability was identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.47%Mar 23, 2026