Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A security vulnerability has been detected in code-projects Accounting System 1.0.Check if you run itEPSS 0.20%Mar 26, 2026
- High8.8The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6.Check if you run itEPSS 0.37%Mar 26, 2026
- Medium4.8A weakness has been identified in Orc discount up to 3.0.1.2.Check if you run itEPSS 0.13%Mar 26, 2026
- Medium6.3A security flaw has been discovered in kalcaddle kodbox 1.64.Check if you run itEPSS 0.50%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.42%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.49%Mar 26, 2026
- High8.1Saloon is a PHP library that gives users tools to build API integrations and SDKs.Check if you run itEPSS 0.65%Mar 26, 2026
- High8.0Saloon is a PHP library that gives users tools to build API integrations and SDKs.Check if you run itEPSS 0.59%Mar 26, 2026
- Medium6.6Saloon is a PHP library that gives users tools to build API integrations and SDKs.Check if you run itEPSS 0.44%Mar 26, 2026
- Medium6.3A vulnerability was identified in kalcaddle kodbox 1.64.Check if you run itEPSS 0.27%Mar 26, 2026
- Critical9.2Squid is a caching proxy for the Web.Check if you run itEPSS 9.27%Mar 26, 2026
- Medium6.9Squid is a caching proxy for the Web.Check if you run itEPSS 1.08%Mar 26, 2026
- High8.7Squid is a caching proxy for the Web.Check if you run itEPSS 9.26%Mar 26, 2026
- Medium4.4CGA-x33v-p82h-mjrhOpen the advisoryMar 26, 2026
- High7.7Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.Check if you run itEPSS 0.33%Mar 26, 2026
- Critical9.1An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.Check if you run itEPSS 0.38%Mar 26, 2026
- Critical9.8An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.Check if you run itEPSS 0.67%Mar 26, 2026
- Medium6.1Cross Site Scripting (xss) vulnerability in Timo 2.0.3 via crafted links in the title field.Check if you run itEPSS 0.17%Mar 26, 2026
- Medium6.2Buffer Overflow vulnerability in ZerBea hcxpcapngtool v.Check if you run itEPSS 0.18%Mar 26, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the uCheck if you run itEPSS 0.26%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user'sCheck if you run itEPSS 0.20%Mar 26, 2026
- Medium6.5Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload.Check if you run itEPSS 0.47%Mar 26, 2026
- High7.8crun is an open source OCI Container Runtime fully written in C.Check if you run itEPSS 0.17%Mar 25, 2026
- High7.7OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.28%Mar 25, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.28%Mar 25, 2026
Sort