Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets.Check if you run itEPSS 0.33%Jul 22, 2025
- Medium6.1The Latest Post Accordian Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Jul 22, 2025
- Medium5.4Authorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH reqCheck if you run itEPSS 0.33%Jul 22, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical.Check if you run itEPSS 0.53%Jul 21, 2025
- Medium6.8A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code executiCheck this weekEPSS 12.26%Jul 21, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- High8.8A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High AvaiCheck if you run itEPSS 4.86%Jul 21, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.57%Jul 21, 2025
- Medium5.1A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- High8.8File access paths in configuration files uploaded by users with administrator access are not validated.Check if you run itEPSS 1.07%Jul 21, 2025
- High7.5Users with administrator access can create databases files outside the files area of the Fuseki server.Check if you run itEPSS 1.56%Jul 21, 2025
- High8.7The EAI developed by Digiwin has a Privilege Escalation vulnerability, allowing remote attackers with regular privileges to elevate their privileges to administrator level via a spCheck if you run itEPSS 0.61%Jul 21, 2025
- Medium4.6Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to accCheck if you run itEPSS 0.23%Jul 21, 2025
- Medium5.3A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1.Check if you run itEPSS 0.51%Jul 20, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.50%Jul 20, 2025
- Medium6.9A vulnerability classified as critical was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.50%Jul 20, 2025
- Unknownelbtide advanced_booking_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.48%Jul 20, 2025
- Medium5.1A vulnerability classified as problematic has been found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.29%Jul 19, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Movie Theater Seat Reservation System 1.0 and classified as critical.Check if you run itEPSS 0.71%Jul 19, 2025
- High7.2The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value.Check if you run itEPSS 2.42%Jul 19, 2025
- Medium5.1A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic.Check if you run itEPSS 0.31%Jul 18, 2025
- Medium5.1A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e.Check if you run itEPSS 0.28%Jul 18, 2025
- Medium5.3A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2.Check if you run itEPSS 0.28%Jul 18, 2025
- Medium5.1A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0.Check if you run itEPSS 0.29%Jul 18, 2025
- Medium6.3A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic.Check if you run itEPSS 0.33%Jul 18, 2025
Sort