Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which alCheck if you run itEPSS 0.45%Jul 18, 2025
- Medium4.3The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.Check if you run itEPSS 0.14%Jul 18, 2025
- Medium6.1The Zuppler Online Ordering plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.0.Check if you run itEPSS 0.13%Jul 18, 2025
- High8.8The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within the auto_login() function in versions 1.0 to 1.1.Check if you run itEPSS 0.44%Jul 18, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1.Check if you run itEPSS 0.31%Jul 18, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 3.65%Jul 18, 2025
- Medium6.9A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.50%Jul 17, 2025
- Medium6.9A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.50%Jul 17, 2025
- Medium5.3A vulnerability was found in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.48%Jul 17, 2025
- Medium6.9A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical.Check if you run itEPSS 0.49%Jul 17, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.48%Jul 17, 2025
- High8.7VoidBot Open-Source is a customizable Discord bot.Check if you run itEPSS 0.38%Jul 16, 2025
- High8.2Emlog is an open source website building system.Check if you run itEPSS 0.41%Jul 16, 2025
- High8.1Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration).Check if you run itEPSS 0.38%Jul 15, 2025
- High8.1The Restrict File Access plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.Check if you run itEPSS 0.30%Jul 15, 2025
- Medium5.5The Companion Auto Update plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘update_delay_days’ parameter in all versions up to, and including, 3.9.2 due toCheck if you run itEPSS 0.29%Jul 15, 2025
- Critical9.8An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an attacker to remotelyCheck this weekEPSS 13.77%Jul 15, 2025
- Medium5.1A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic.Check if you run itEPSS 0.29%Jul 14, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0.Check if you run itEPSS 0.38%Jul 14, 2025
- Medium4.8A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM.Check if you run itEPSS 0.33%Jul 14, 2025
- Medium5.3A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.38%Jul 14, 2025
- Medium5.3A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical.Check if you run itEPSS 0.40%Jul 14, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical.Check if you run itEPSS 0.40%Jul 14, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2.Check if you run itEPSS 0.40%Jul 14, 2025
Sort