Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability has been found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical.Check if you run itEPSS 0.43%Jul 12, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26.Check if you run itEPSS 0.29%Jul 12, 2025
- Medium4.8A vulnerability classified as problematic was found in Open5GS up to 2.7.3.Check if you run itEPSS 0.25%Jul 12, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.40%Jul 12, 2025
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.49%Jul 12, 2025
- Medium5.3A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.40%Jul 12, 2025
- Medium5.3A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.40%Jul 12, 2025
- Medium6.5IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocoCheck if you run itEPSS 0.31%Jul 12, 2025
- Critical9.8The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upCheck if you run itEPSS 7.99%Jul 12, 2025
- Medium5.9webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Jul 12, 2025
- High7.5The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includCheck if you run itEPSS 1.88%Jul 12, 2025
- Medium4.9The RSFirewall! plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.1.42 via the get_local_filename() function.Check if you run itEPSS 0.45%Jul 12, 2025
- Critical9.8simplefilelist simple_file_list Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 43.52%Jul 12, 2025
- High8.8The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versioCheck if you run itEPSS 0.62%Jul 12, 2025
- High8.8The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_image_upload() function in all versions up to, and incluCheck if you run itEPSS 0.77%Jul 12, 2025
- Medium4.9A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can perform an arbitrary file read via a maliciously crafted web reCheck if you run itEPSS 0.98%Jul 12, 2025
- Critical9.0A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.Check if you run itEPSS 0.59%Jul 12, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Online Movie Theater Seat Reservation System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Movie Theater Seat Reservation System 1.0.Check if you run itEPSS 0.49%Jul 11, 2025
- Critical10.0An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, default credentials.Check if you run itEPSS 0.68%Jul 11, 2025
- Medium6.5An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.Check if you run itEPSS 0.38%Jul 11, 2025
- Medium6.3A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2.Check if you run itEPSS 0.43%Jul 11, 2025
- High8.1A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session.Check if you run itEPSS 0.33%Jul 11, 2025
Sort