Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The MP-Ukagaka plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output esCheck if you run itEPSS 0.30%Feb 7, 2026
- Medium6.1The Subitem AL Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.0.0 due to insufficient input sCheck if you run itEPSS 0.30%Feb 7, 2026
- Medium6.4The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.1 due to iCheck if you run itEPSS 0.21%Feb 7, 2026
- Medium5.3A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.31%Feb 7, 2026
- Medium5.3A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.31%Feb 7, 2026
- Medium5.3A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.31%Feb 7, 2026
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid component in all versions up to, and including, 5.5.3 due to insufficientCheck if you run itEPSS 0.27%Feb 7, 2026
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_raw_content shortcode in all versions up to, and including, 5.4.8 dueCheck if you run itEPSS 0.23%Feb 7, 2026
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'bt_bb_tabs' shortcode in all versions up to, and including, 5.5.1 due to insCheck if you run itEPSS 0.27%Feb 7, 2026
- Medium5.3A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.34%Feb 7, 2026
- Medium5.3A vulnerability was identified in O2OA up to 9.0.0.Check if you run itEPSS 0.32%Feb 7, 2026
- Medium6.9A vulnerability was determined in itsourcecode School Management System 1.0.Check if you run itEPSS 0.38%Feb 7, 2026
- Medium6.8Rate limiting for certain API calls is not being enforced, making HCL Velocity vulnerable to Denial of Service (DoS) attacks.Check if you run itEPSS 0.30%Feb 7, 2026
- High8.7A vulnerability was found in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.77%Feb 7, 2026
- Medium5.1Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users.Check if you run itEPSS 0.19%Feb 6, 2026
- Medium6.7TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application.Check if you run itEPSS 0.25%Feb 6, 2026
- Medium6.7TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration that allows local attackers to crash the application.Check if you run itEPSS 0.25%Feb 6, 2026
- Medium6.9AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application.Check if you run itEPSS 0.24%Feb 6, 2026
- Medium6.7AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name.Check if you run itEPSS 0.25%Feb 6, 2026
- Medium6.7AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name.Check if you run itEPSS 0.25%Feb 6, 2026
- High8.8QuickDate 1.3.2 contains a SQL injection vulnerability that allows remote attackers to manipulate database queries through the '_located' parameter in the find_matches endpoint.Check if you run itEPSS 0.46%Feb 6, 2026
- High8.4Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory.Check if you run itEPSS 0.73%Feb 6, 2026
- High8.4Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payCheck if you run itEPSS 0.97%Feb 6, 2026
- High8.5SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems.Check if you run itEPSS 0.16%Feb 6, 2026
- High8.4Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling featureCheck if you run itEPSS 0.68%Feb 6, 2026
Sort