Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rollno and usernaCheck if you run itEPSS 0.29%Mar 6, 2026
- High7.12-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.phCheck if you run itEPSS 0.52%Mar 6, 2026
- High8.8Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries by injecting malicious code through the txtCustomerCCheck if you run itEPSS 0.26%Mar 6, 2026
- Medium4.3Missing Authorization vulnerability in Rank Math Rank Math SEO PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO PRO: froCheck if you run itEPSS 0.21%Mar 6, 2026
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20.Check if you run itEPSS 0.29%Mar 6, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pascal Birchler Preferred Languages allows DOM-Based XSS.This issue affCheck if you run itEPSS 0.20%Mar 6, 2026
- UnknownCGA-xxxg-9xq8-9vh7Open the advisoryMar 6, 2026
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.23%Mar 6, 2026
- High7.5The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non sCheck if you run itEPSS 0.15%Mar 6, 2026
- Medium5.1An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API.Check if you run itEPSS 0.28%Mar 6, 2026
- Critical9.8An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions.Check if you run itEPSS 0.98%Mar 6, 2026
- Critical9.4An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement.Check if you run itEPSS 0.73%Mar 6, 2026
- High7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.Check if you run itEPSS 0.70%Mar 6, 2026
- Medium6.1The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in allCheck if you run itEPSS 0.25%Mar 6, 2026
- Critical9.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.70%Mar 6, 2026
- Medium5.7SiYuan is a personal knowledge management system.Check if you run itEPSS 0.37%Mar 6, 2026
- Medium4.3melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.26%Mar 6, 2026
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.61%Mar 6, 2026
- Medium6.9Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Patch nowKEVEPSS 3.05%Mar 6, 2026
- Critical9.8AVideo is a video-sharing Platform software.Patch nowKEVEPSS 8.94%Mar 6, 2026
- Medium6.9HumHub is an Open Source Enterprise Social Network.Check if you run itEPSS 0.22%Mar 6, 2026
- High8.9Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.Check if you run itEPSS 2.59%Mar 6, 2026
- High8.8changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.59%Mar 6, 2026
- High8.8changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.54%Mar 6, 2026
- Medium6.1changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.32%Mar 6, 2026
Sort