Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the '…Check if you run itEPSS 0.33%May 29, 2026
- High8.8E-Registrasi Pencak Silat 18.10 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.33%May 29, 2026
- Medium5.1Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the reply_t…Check if you run itEPSS 0.21%May 29, 2026
- High8.8Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter.Check if you run itEPSS 0.33%May 29, 2026
- High7.3Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload…Check if you run itEPSS 0.51%May 29, 2026
- High7.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.15%May 29, 2026
- Medium6.9WWBN AVideo is an open source video platform.Check if you run itEPSS 0.58%May 29, 2026
- Medium6.9WWBN AVideo is an open source video platform.Check if you run itEPSS 0.59%May 29, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%May 29, 2026
- Medium6.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.21%May 29, 2026
- Medium6.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.16%May 29, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.23%May 29, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.53%May 29, 2026
- High7.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.49%May 29, 2026
- High7.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.35%May 29, 2026
- High8.7HAX CMS helps manage microsite universe with PHP or NodeJs backends.Check if you run itEPSS 0.37%May 29, 2026
- Medium5.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.39%May 29, 2026
- Critical9.9A path traversal vulnerability exists in the campaign import feature of Mautic 7.Check if you run itEPSS 0.93%May 29, 2026
- High8.8The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'setti…Check if you run itEPSS 0.38%May 29, 2026
- High7.5Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.58%May 28, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.47%May 28, 2026
- High7.3An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via…Check if you run itEPSS 0.49%May 28, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.30%May 28, 2026
- Critical9.3SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a hardcoded password vulnerability in the web management interface recovery endpoi…Check if you run itEPSS 0.53%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwor…Check if you run itEPSS 0.33%May 28, 2026