Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Denial of serviceCheck if you run itEPSS 0.18%Sep 4, 2025
- High7.2The Easy Timer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.1 via the plugin's shortcodes.Check if you run itEPSS 0.91%Sep 4, 2025
- High7.2The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter.Check if you run itEPSS 0.61%Sep 4, 2025
- Medium4.9The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the 'custom_log' parameter.Check if you run itEPSS 0.43%Sep 4, 2025
- High7.2The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and incluCheck if you run itEPSS 0.92%Sep 4, 2025
- High7.1Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of requestCheck if you run itEPSS 0.52%Sep 4, 2025
- High7.5Markdownify is a Model Context Protocol server for converting almost anything to Markdown.Check if you run itEPSS 0.97%Sep 4, 2025
- Medium5.3A vulnerability has been found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.49%Sep 4, 2025
- Medium5.3A flaw has been found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.49%Sep 4, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check if you run itEPSS 0.64%Sep 4, 2025
- Medium5.1A vulnerability was detected in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.29%Sep 4, 2025
- Medium5.1A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.24%Sep 4, 2025
- Critical9.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.71%Sep 4, 2025
- Medium5.4PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.Check if you run itEPSS 0.21%Sep 4, 2025
- High7.2An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.phpCheck if you run itEPSS 0.40%Sep 4, 2025
- High7.7Soft Serve is a self-hostable Git server for the command line.Check if you run itEPSS 0.34%Sep 3, 2025
- High8.7A weakness has been identified in D-Link DI-8400 16.07.26A1.Check if you run itEPSS 1.60%Sep 3, 2025
- Medium5.3A security flaw has been discovered in elunez eladmin 1.1.Check if you run itEPSS 0.38%Sep 3, 2025
- Medium5.3A vulnerability was identified in fuyang_lipengjun platform 1.0.0.Check if you run itEPSS 0.38%Sep 3, 2025
- Medium6.9A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506.Check if you run itEPSS 2.73%Sep 3, 2025
- Medium5.3A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415_B20250515.Check if you run itEPSS 3.40%Sep 3, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.44%Sep 3, 2025
- Low2.3CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture.Check if you run itEPSS 0.42%Sep 3, 2025
- Medium6.9A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium5.3A vulnerability was detected in Jinher OA 1.0.Check if you run itEPSS 0.36%Sep 3, 2025
Sort