Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5phpmyfaq phpmyfaq Exposure of Sensitive Information Through Data QueriesPatch nowKEVEPSS 2.14%Dec 29, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codeaffairs Wp Text Slider Widget wp-text-slider-widget allows Stored XSS.ThisCheck if you run itEPSS 0.16%Dec 29, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in reDim GmbH CookieHint WP cookiehint-wp allows PHP Local FilCheck if you run itEPSS 0.34%Dec 29, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in INVELITY Invelity SPS connect invelity-sps-connect allows Reflected XSS.This iCheck if you run itEPSS 0.18%Dec 29, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce CedCommerce Integration for Good Market ced-gooCheck if you run itEPSS 0.34%Dec 29, 2025
- Medium6.9A vulnerability was determined in code-projects Assessment Management 1.0.Check if you run itEPSS 0.43%Dec 29, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prasadkirpekar Advanced Custom CSS advanced-custom-css allows Reflected XSS.ThCheck if you run itEPSS 0.18%Dec 29, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in councilsoft Content Grid Slider content-grid-slider allows Reflected XSS.ThisCheck if you run itEPSS 0.18%Dec 29, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in HETWORKS WordPress Image shrinker wp-image-shrinker allows Server Side Request Forgery.This issue affects WordPress Image shrinkCheck if you run itEPSS 0.14%Dec 29, 2025
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I.Check if you run itEPSS 0.33%Dec 29, 2025
- Medium4.8A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.24%Dec 29, 2025
- Medium5.1A vulnerability was found in GreenCMS up to 2.3.Check if you run itEPSS 0.68%Dec 29, 2025
- High8.6A vulnerability was identified in Tenda WH450 1.0.0.18.Check if you run itEPSS 1.09%Dec 29, 2025
- High8.6A vulnerability was determined in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.87%Dec 29, 2025
- High8.6A vulnerability was found in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.79%Dec 29, 2025
- High8.6A vulnerability has been found in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.79%Dec 29, 2025
- Medium6.9A flaw has been found in Open5GS up to 2.7.5.Check if you run itEPSS 0.62%Dec 29, 2025
- High8.4Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1Check if you run itEPSS 0.32%Dec 29, 2025
- High8.5Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects Web Fax: from 3.0 befoCheck if you run itEPSS 0.38%Dec 29, 2025
- Medium5.1A weakness has been identified in BiggiDroid Simple PHP CMS 1.0.Check if you run itEPSS 0.42%Dec 29, 2025
- High8.6A security flaw has been discovered in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.79%Dec 29, 2025
- High8.6Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings InformaCheck if you run itEPSS 0.05%Dec 29, 2025
- High8.6A vulnerability was identified in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.79%Dec 29, 2025
- Critical9.8A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13.Check if you run itEPSS 4.97%Dec 29, 2025
- High8.8In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.Check if you run itEPSS 1.10%Dec 29, 2025
Sort