Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[sconfCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[sconfCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[GroupCheck if you run itEPSS 0.22%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[FileMCheck if you run itEPSS 0.22%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AdminCheck if you run itEPSS 0.22%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- Medium5.3The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.16%Sep 4, 2025
- High7.2The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'upload_media' function in all versions up to, andCheck if you run itEPSS 1.24%Sep 4, 2025
- High7.2The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter.Check if you run itEPSS 0.61%Sep 4, 2025
- Medium4.9The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the 'custom_log' parameter.Check if you run itEPSS 0.43%Sep 4, 2025
- High7.2The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and incluCheck if you run itEPSS 0.92%Sep 4, 2025
- High7.1Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of requestCheck if you run itEPSS 0.52%Sep 4, 2025
- Medium5.4PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.Check if you run itEPSS 0.21%Sep 4, 2025
- High7.2An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.phpCheck if you run itEPSS 0.40%Sep 4, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 4, 2025
- Medium5.3A security flaw has been discovered in elunez eladmin 1.1.Check if you run itEPSS 0.38%Sep 3, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium6.9A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium6.9A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0.Check if you run itEPSS 0.46%Sep 3, 2025
- Medium5.5SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available.Check if you run itEPSS 0.24%Sep 3, 2025
- High8.6Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCRECheck if you run itEPSS 0.37%Sep 3, 2025
- Medium6.9A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0.Check if you run itEPSS 0.61%Sep 3, 2025
- High8.8phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.Check if you run itEPSS 0.61%Sep 3, 2025
- High7.2phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the categoryName parameter.Check if you run itEPSS 0.62%Sep 3, 2025
- Critical9.1phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.Check if you run itEPSS 0.47%Sep 3, 2025
Sort