Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function.Check if you run itEPSS 0.44%Apr 17, 2025
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function.Check if you run itEPSS 0.44%Apr 17, 2025
- High7.2FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.Check if you run itEPSS 0.40%Apr 17, 2025
- Medium6.1Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.Check if you run itEPSS 0.30%Apr 17, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityPatch nowKEVEPSS 0.69%Apr 17, 2025
- Medium4.3The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules.Check if you run itEPSS 0.29%Apr 16, 2025
- Medium4.7XWiki Platform is a generic wiki platform.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium6.0A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execuCheck if you run itEPSS 0.37%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb In clustermd, separate write-intent-bitmaps areCheck if you run itEPSS 0.20%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.Check if you run itEPSS 0.21%Apr 16, 2025
- Medium6.9A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.79%Apr 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Stored XSS.This issue affects ChurCheck if you run itEPSS 0.36%Apr 16, 2025
- Medium4.9Path Traversal: '.../...//' vulnerability in Quý Lê 91 Administrator Z administrator-z allows Path Traversal.This issue affects Administrator Z: from n/a through <= 2025.03.28.Check if you run itEPSS 0.70%Apr 16, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.73%Apr 16, 2025
- Medium4.8The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrCheck if you run itEPSS 0.27%Apr 16, 2025
- Medium5.3The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip_spam_check' function due to insufficienCheck if you run itEPSS 0.25%Apr 16, 2025
- Medium6.1The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.4A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28.Check if you run itEPSS 0.35%Apr 16, 2025
- Critical9.8Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uploading a ZIP file.Check if you run itEPSS 0.63%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at id_generator/admin/?page=generate&template=4.Check if you run itEPSS 0.51%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=generate/index&id=1.Check if you run itEPSS 0.51%Apr 16, 2025
- Medium5.9Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=templates/manage_template&id=Check if you run itEPSS 0.25%Apr 16, 2025
- Critical9.6NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system.Check if you run itEPSS 0.60%Apr 15, 2025
- High7.5conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting.Check if you run itEPSS 0.26%Apr 15, 2025
- High7.5Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data.Check if you run itEPSS 0.48%Apr 15, 2025
Sort