Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.36%Jul 25, 2025
- Medium6.9A vulnerability was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.60%Jul 25, 2025
- Medium5.3A vulnerability was found in code-projects Food Review System 1.0 and classified as critical.Check if you run itEPSS 0.55%Jul 25, 2025
- Critical10.0An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier.Check if you run itEPSS 2.47%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that uprobes can be used destructively when useCheck if you run itEPSS 0.22%Jul 25, 2025
- Medium5.3A vulnerability was found in PHPGurukul Login and User Management System 3.3.Check if you run itEPSS 0.48%Jul 25, 2025
- Medium5.3A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3.Check if you run itEPSS 0.49%Jul 25, 2025
- Medium6.1The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting wCheck if you run itEPSS 0.28%Jul 25, 2025
- Critical9.8The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the *_ajax_save_optioCheck if you run itEPSS 2.85%Jul 25, 2025
- Low2.9JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter.Check if you run itEPSS 0.28%Jul 25, 2025
- Medium4.9CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leaCheck if you run itEPSS 0.66%Jul 25, 2025
- High7.1An issue in ETSI Open-Source MANO (OSM) 14.0.x before 14.0.3, 15.0.x before 15.0.2, 16.0.0, and 17.0.0 allows a remote authenticated attacker to escalate privileges via the /osm/adCheck if you run itEPSS 0.37%Jul 25, 2025
- High8.3An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile stoCheck if you run itEPSS 0.73%Jul 24, 2025
- Medium6.1The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2.Check if you run itEPSS 0.23%Jul 24, 2025
- Medium4.3The iThoughts Advanced Code Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.10.Check if you run itEPSS 0.19%Jul 24, 2025
- Medium6.1The FunnelCockpit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘error’ parameter in all versions up to, and including, 1.4.3 due to insufficient inpCheck if you run itEPSS 0.46%Jul 24, 2025
- Medium6.1Qwizcards Reflected Cross-Site Scripting (XSS)Patch nowKEVEPSS 0.50%Jul 23, 2025
- Medium5.3Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1.Check if you run itEPSS 0.33%Jul 23, 2025
- Medium5.9Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11Check if you run itEPSS 0.24%Jul 23, 2025
- Medium5.9Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-1Check if you run itEPSS 0.24%Jul 23, 2025
- High7.2Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-Check if you run itEPSS 1.20%Jul 23, 2025
- High8.8The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.44%Jul 23, 2025
- Medium6.5The Omnishop plugin for WordPress is vulnerable to Cross-Site Request Forgery on its /users/delete REST route in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.18%Jul 23, 2025
- Medium6.1The YANewsflash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.14%Jul 23, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Jul 23, 2025
Sort