Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engineered for modern web infrastructure.Check if you run itEPSS 0.24%Aug 19, 2025
- Medium6.9A vulnerability was found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.44%Aug 19, 2025
- Critical9.3flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.27%Aug 19, 2025
- Medium6.9flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.37%Aug 19, 2025
- Medium5.3A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.46%Aug 19, 2025
- Medium4.9HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.Check if you run itEPSS 0.24%Aug 19, 2025
- Medium6.9A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317.Check if you run itEPSS 0.34%Aug 19, 2025
- Low2.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%Aug 19, 2025
- Medium5.3A vulnerability was determined in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.34%Aug 19, 2025
- Medium5.1A vulnerability was found in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability has been found in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium4.4The Contact Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title’ parameter in all versions up to, and including, 8.6.5 due to insufficient inpuCheck if you run itEPSS 0.30%Aug 19, 2025
- Critical9.8The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'imic_agent_register' function in all versions up to, and iCheck if you run itEPSS 0.37%Aug 19, 2025
- High8.8The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'change_role_member' parameter in all versions up to, and iCheck if you run itEPSS 0.33%Aug 19, 2025
- Medium6.1An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image.Check if you run itEPSS 0.22%Aug 19, 2025
- Critical9.8In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison.Check if you run itEPSS 0.55%Aug 19, 2025
- Critical9.8An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/reset_password endpoint.Check if you run itEPSS 0.34%Aug 19, 2025
- Medium5.3EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interfacCheck if you run itEPSS 0.71%Aug 19, 2025
- UnknownArcserve udp Incorrect AuthorizationPatch nowKEVEPSS 39.77%Aug 19, 2025
- UnknownZyxel nbg2105_firmware Improper AuthenticationPatch nowKEVEPSS 20.51%Aug 19, 2025
- Medium5.5librenms is a community-based GPL-licensed network monitoring system.Check this weekEPSS 14.81%Aug 18, 2025
- Medium4.8Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Check if you run itEPSS 0.25%Aug 18, 2025
- Medium4.8A vulnerability was detected in ZenCart 2.1.0.Check if you run itEPSS 0.28%Aug 18, 2025
- Medium5.1A weakness has been identified in zhenfeng13 My-Blog up to 1.0.0.Check if you run itEPSS 0.26%Aug 18, 2025
- Critical9.8The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0.Check if you run itEPSS 0.51%Aug 16, 2025
Sort