Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Critical9.3A SQL injection vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium4.3The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.95.Check if you run itEPSS 0.15%Jun 10, 2025
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0.Check if you run itEPSS 0.53%Jun 10, 2025
- High8.8SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials.Check if you run itEPSS 0.39%Jun 10, 2025
- High7.2The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload.Check if you run itEPSS 0.74%Jun 10, 2025
- High8.7CyberData 011209 Intercom does not properly store or protect web server admin credentials.Check if you run itEPSS 0.42%Jun 9, 2025
- Critical9.1listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 1.58%Jun 9, 2025
- Medium5.1A vulnerability was found in Emlog up to 2.5.7 and classified as problematic.Check if you run itEPSS 0.41%Jun 9, 2025
- Medium6.9A vulnerability has been found in TRENDnet TV-IP121W 1.1.1 Build 36 and classified as critical.Check if you run itEPSS 0.46%Jun 9, 2025
- High8.7Smart Parking Management System from Honding Technology has a Missing Authorization vulnerability, allowing remote attackers with regular privileges to access a specific functionalCheck if you run itEPSS 0.63%Jun 9, 2025
- Medium6.1The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couCheck if you run itEPSS 0.51%Jun 9, 2025
- Medium4.8The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-SitCheck if you run itEPSS 0.26%Jun 9, 2025
- Medium4.8The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which coulCheck if you run itEPSS 0.26%Jun 9, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interfacCheck if you run itEPSS 0.62%Jun 9, 2025
- Medium5.4Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module.Check if you run itEPSS 0.31%Jun 9, 2025
- UnknownUse of Default PasswordPatch nowKEVEPSS 2.40%Jun 8, 2025
- Unknownonline_fire_reporting_system_project online_fire_reporting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.78%Jun 8, 2025
- Unknownthedigitalcraft atomcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.15%Jun 8, 2025
- Unknownmetinfo metinfo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.44%Jun 8, 2025
- Medium5.3A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.41%Jun 7, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.41%Jun 7, 2025
- High7.32BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.33%Jun 6, 2025
- Low2.4A command injection vulnerability has been reported to affect QHora.Check if you run itEPSS 0.62%Jun 6, 2025
- Low2.4An out-of-bounds read vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.14%Jun 6, 2025
Sort