Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STO…Check if you run itEPSS 0.96%Mar 22, 2026
- High8.7Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter.Check if you run itEPSS 0.53%Mar 22, 2026
- Low1.9A vulnerability was determined in Wavlink WL-WN578W2 221110.Check if you run itEPSS 0.43%Mar 22, 2026
- Low2.1A vulnerability was found in Wavlink WL-WN578W2 221110.Check if you run itEPSS 5.08%Mar 22, 2026
- Low1.9A vulnerability was identified in PyTorch 2.10.0.Check if you run itEPSS 0.44%Mar 22, 2026
- High8.8The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4.Check if you run itEPSS 0.54%Mar 22, 2026
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.56%Mar 21, 2026
- Medium5.5A vulnerability was determined in trueleaf ApiFlow 0.9.7.Check if you run itEPSS 0.49%Mar 21, 2026
- High7.1i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php.Check if you run itEPSS 0.38%Mar 21, 2026
- High8.8i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.36%Mar 21, 2026
- High8.8ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.Check if you run itEPSS 0.33%Mar 21, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.Check if you run itEPSS 1.11%Mar 21, 2026
- High8.8phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idn…Check if you run itEPSS 0.38%Mar 21, 2026
- Medium6.8SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in…Check if you run itEPSS 0.90%Mar 21, 2026
- High8.8Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.34%Mar 21, 2026
- High8.8SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.34%Mar 21, 2026
- High7.1Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.Check if you run itEPSS 0.35%Mar 21, 2026
- High7.5The JetFormBuilder plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 3.5.6.2.Check if you run itEPSS 0.59%Mar 21, 2026
- Medium4.3The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14.Check if you run itEPSS 0.20%Mar 21, 2026
- Medium4.3The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.5.9.Check if you run itEPSS 0.35%Mar 21, 2026
- Medium5.3The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23.Check if you run itEPSS 0.53%Mar 21, 2026
- Medium5.3The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.53%Mar 21, 2026
- Medium5.3The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.54%Mar 21, 2026
- High7.2The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3 via the redux_p AJAX action…Check if you run itEPSS 0.47%Mar 21, 2026
- Medium5.3The Canto plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1 via the file.Check if you run itEPSS 1.32%Mar 21, 2026