Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0.Check if you run itEPSS 0.49%Jul 7, 2025
- Medium5.1A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.46%Jul 7, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium5.3A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium5.1A vulnerability was found in Campcodes Complaint Management System 1.0.Check if you run itEPSS 0.46%Jul 7, 2025
- High8.0An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers.Check if you run itEPSS 0.40%Jul 7, 2025
- Medium6.9A vulnerability was found in Campcodes Complaint Management System 1.0.Check if you run itEPSS 0.55%Jul 7, 2025
- Critical9.1A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') wCheck if you run itEPSS 0.91%Jul 7, 2025
- High8.5A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file.Check if you run itEPSS 0.14%Jul 7, 2025
- High8.6ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitraCheck if you run itEPSS 1.02%Jul 7, 2025
- High7.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.Check if you run itEPSS 1.92%Jul 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue config fails Commit 104d0e2f6222 ("nvme-fabrics: reset admin coCheck if you run itEPSS 0.36%Jul 4, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path TraCheck if you run itEPSS 0.48%Jul 4, 2025
- Medium4.3The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Jul 4, 2025
- High7.2The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_locInstall function in all versions up to,Check if you run itEPSS 1.26%Jul 4, 2025
- High7.2The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the do_updatecar and createcar functCheck if you run itEPSS 0.76%Jul 3, 2025
- Critical9.0An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3.Check if you run itEPSS 6.88%Jul 3, 2025
- High7.2The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_Check this weekEPSS 55.47%Jul 3, 2025
- High7.4The web application is susceptible to cross-site-scripting attacks.Check if you run itEPSS 0.35%Jul 3, 2025
- Low3.8Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.Check if you run itEPSS 0.16%Jul 2, 2025
- Medium5.3HomeBox is a home inventory and organization system.Check if you run itEPSS 0.30%Jul 2, 2025
- Medium4.9A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to make other management interfaces unavailabCheck if you run itEPSS 0.38%Jul 2, 2025
- High8.8Graylog is a free and open log management platform.Check if you run itEPSS 0.61%Jul 2, 2025
- Medium6.5Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections.Check if you run itEPSS 0.39%Jul 2, 2025
- Medium6.4Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in theory, potentially useCheck if you run itEPSS 0.18%Jul 2, 2025
Sort