Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and tCheck if you run itEPSS 0.72%Apr 23, 2025
- High7.1Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49 (EOL) causes remote site authentication secrets to be writteCheck if you run itEPSS 0.30%Apr 22, 2025
- Medium5.3The Memberpress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.37 via the WordPress core search feature.Check if you run itEPSS 0.36%Apr 22, 2025
- High8.1The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to autheCheck if you run itEPSS 9.52%Apr 22, 2025
- High7.1The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whicCheck if you run itEPSS 0.55%Apr 22, 2025
- Medium4.9**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticatedCheck this weekEPSS 12.62%Apr 22, 2025
- Medium6.7An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attCheck if you run itEPSS 0.20%Apr 22, 2025
- High7.8An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticatCheck if you run itEPSS 0.94%Apr 22, 2025
- High7.3Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuratiCheck if you run itEPSS 0.34%Apr 22, 2025
- Critical9.8An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php.Check if you run itEPSS 0.68%Apr 22, 2025
- Low3.8A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area inCheck if you run itEPSS 0.25%Apr 21, 2025
- Medium4.3opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,Check if you run itEPSS 0.40%Apr 21, 2025
- Medium6.9A vulnerability was found in PHPGurukul Men Salon Management System 1.0.Check if you run itEPSS 0.63%Apr 20, 2025
- Medium6.9A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.63%Apr 20, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.63%Apr 20, 2025
- Medium4.8A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.39%Apr 20, 2025
- Medium5.8In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal in the username field.Check if you run itEPSS 0.92%Apr 20, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%Apr 19, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3.Check if you run itEPSS 0.34%Apr 19, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in WCMS 11.Check if you run itEPSS 0.46%Apr 19, 2025
- Medium5.1A vulnerability classified as critical was found in SeaCMS up to 13.3.Check if you run itEPSS 0.53%Apr 19, 2025
- High7.5The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.24%Apr 19, 2025
- Medium4.3The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,Check if you run itEPSS 0.15%Apr 19, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.57%Apr 19, 2025
- Medium6.4SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name ofCheck if you run itEPSS 0.10%Apr 19, 2025
Sort