Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.Check if you run itEPSS 1.87%Apr 7, 2026
- Unknownthimpress wp_hotel_booking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.15%Apr 7, 2026
- Medium5.3A vulnerability was identified in code-projects Online Hotel Booking 1.0.Check if you run itEPSS 0.37%Apr 6, 2026
- Medium6.9A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 6, 2026
- Medium6.9A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.31%Apr 6, 2026
- Medium6.9A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 6, 2026
- Medium6.9A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 6, 2026
- Medium6.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.58%Apr 6, 2026
- High8.7A weakness has been identified in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.68%Apr 6, 2026
- High8.7The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace.Check if you run itEPSS 0.35%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.38%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.38%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Apr 6, 2026
- High8.7A security flaw has been discovered in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.68%Apr 6, 2026
- Low3.7WWBN AVideo is an open source video platform.Check if you run itEPSS 0.33%Apr 6, 2026
- High7.1SDL_image is a library to load images of various formats as SDL surfaces.Check if you run itEPSS 0.27%Apr 6, 2026
- Critical9.8goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.65%Apr 6, 2026
- High8.1Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.34%Apr 6, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.37%Apr 6, 2026
- Medium5.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.32%Apr 6, 2026
- High8.1Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.31%Apr 6, 2026
- Medium4.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.26%Apr 6, 2026
- Medium6.1Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.26%Apr 6, 2026
- High7.7Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitraCheck if you run itEPSS 1.38%Apr 6, 2026
- High7.7Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.34%Apr 6, 2026
Sort