Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in projectworlds Online Admission System 1.0.Check if you run itEPSS 0.44%Aug 1, 2025
- Medium6.9A vulnerability was found in code-projects Online Movie Streaming 1.0.Check if you run itEPSS 0.41%Aug 1, 2025
- Medium6.5The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the admin_dCheck if you run itEPSS 0.34%Aug 1, 2025
- Medium6.9A vulnerability was found in code-projects Online Movie Streaming 1.0.Check if you run itEPSS 0.45%Aug 1, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.53%Aug 1, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical.Check if you run itEPSS 0.60%Aug 1, 2025
- Medium6.1Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticCheck if you run itEPSS 0.86%Aug 1, 2025
- Medium5.3A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router.Check if you run itEPSS 1.16%Jul 31, 2025
- Critical10.0ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.Check if you run itEPSS 4.07%Jul 31, 2025
- Critical9.5A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authenticationCheck if you run itEPSS 2.47%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0.Check if you run itEPSS 0.52%Jul 31, 2025
- High7.0pyjwt v2.10.1 was discovered to contain weak encryption.Check if you run itEPSS 0.18%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- Medium4.9The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient esCheck if you run itEPSS 0.39%Jul 30, 2025
- High8.8The Hydra Booking plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the tfhb_reset_password_callback() function in versions 1.1.0 to 1Check if you run itEPSS 0.40%Jul 29, 2025
- Medium5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.Check if you run itEPSS 4.89%Jul 28, 2025
- Medium5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.Check if you run itEPSS 8.45%Jul 28, 2025
- Medium5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.Check if you run itEPSS 8.45%Jul 28, 2025
- High7.1Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections.Check if you run itEPSS 0.17%Jul 28, 2025
- High7.2Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certaiCheck if you run itEPSS 0.13%Jul 28, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0.Check if you run itEPSS 0.47%Jul 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" featCheck if you run itEPSS 0.19%Jul 28, 2025
- Medium6.9A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.52%Jul 28, 2025
- Medium6.9A vulnerability was found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.52%Jul 28, 2025
- Medium6.9A vulnerability was found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.52%Jul 28, 2025
Sort