Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which coulCheck if you run itEPSS 0.22%Jan 2, 2026
- Medium6.1The Logo Slider WordPress plugin before 4.9.0 does not validate and escape some of its slider options before outputting them back in the dashboard, which could allow users with theCheck if you run itEPSS 0.21%Jan 2, 2026
- Medium6.5The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers.Check if you run itEPSS 0.15%Jan 2, 2026
- High8.7A vulnerability was detected in UTT 进取 512W 1.7.7-171114.Check if you run itEPSS 0.80%Jan 2, 2026
- High8.7A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114.Check if you run itEPSS 0.88%Jan 2, 2026
- High8.7A weakness has been identified in UTT 进取 512W 1.7.7-171114.Check if you run itEPSS 0.88%Jan 2, 2026
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Check if you run itEPSS 4.00%Jan 2, 2026
- Medium6.9A vulnerability was identified in jackying H-ui.admin up to 3.1.Check if you run itEPSS 0.46%Jan 2, 2026
- Medium6.9A vulnerability was determined in Yonyou KSOA 9.0.Check if you run itEPSS 0.52%Jan 2, 2026
- Medium6.9A vulnerability was found in Yonyou KSOA 9.0.Check if you run itEPSS 0.46%Jan 2, 2026
- Medium5.3A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0.Check if you run itEPSS 0.37%Jan 2, 2026
- Medium6.9A flaw has been found in EmpireSoft EmpireCMS up to 8.0.Check if you run itEPSS 1.27%Jan 2, 2026
- Medium6.9A vulnerability was detected in Yonyou KSOA 9.0.Check if you run itEPSS 0.46%Jan 2, 2026
- Medium6.9A security vulnerability has been detected in Yonyou KSOA 9.0.Check if you run itEPSS 0.46%Jan 2, 2026
- Medium4.8A weakness has been identified in Open5GS up to 2.7.6.Check if you run itEPSS 0.23%Jan 2, 2026
- High7.5An integer underflow vulnerability exists in the function in of gpsd versions prior to commit .Check if you run itEPSS 0.56%Jan 2, 2026
- Critical9.8gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file.Check if you run itEPSS 0.79%Jan 2, 2026
- High7.5An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.Check if you run itEPSS 0.93%Jan 2, 2026
- High7.5Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.Check if you run itEPSS 0.29%Jan 2, 2026
- High7.5An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges viCheck if you run itEPSS 0.51%Jan 2, 2026
- Critical9.8SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information.Check if you run itEPSS 0.38%Jan 2, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.27%Jan 2, 2026
- Critical9.8wpmudev branda Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.87%Jan 2, 2026
- Medium5.3REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.Check if you run itEPSS 0.29%Jan 2, 2026
- Medium4.8A security flaw has been discovered in Open5GS up to 2.7.6.Check if you run itEPSS 0.19%Jan 1, 2026
Sort