Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3A vulnerability classified as problematic has been found in y_project RuoYi 4.8.0.Check if you run itEPSS 0.48%May 17, 2025
- High7.2The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server evCheck if you run itEPSS 0.58%May 17, 2025
- Critical9.8The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echo_generate_featured_image() function inCheck if you run itEPSS 0.79%May 17, 2025
- Critical9.8The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featurCheck if you run itEPSS 1.08%May 17, 2025
- Medium6.9A vulnerability was found in SourceCodester Doctor's Appointment System 1.0.Check if you run itEPSS 0.56%May 17, 2025
- Medium6.9A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0.Check if you run itEPSS 0.56%May 17, 2025
- Medium6.1The Audio Comments Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.14%May 17, 2025
- Medium6.9A vulnerability was found in SourceCodester Doctor's Appointment System 1.0.Check if you run itEPSS 0.56%May 17, 2025
- Medium6.9A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 17, 2025
- Medium6.9A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 17, 2025
- Critical9.1RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification codes to perform arbitrary account registCheck if you run itEPSS 0.55%May 17, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.70%May 16, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.70%May 16, 2025
- Medium6.9A vulnerability was found in CodeAstro Pharmacy Management System 1.0.Check if you run itEPSS 0.56%May 16, 2025
- Medium6.5The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which coulCheck if you run itEPSS 0.20%May 16, 2025
- High8.7A vulnerability was found in Tenda AC7 15.03.06.44.Check if you run itEPSS 1.11%May 16, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration.Check if you run itEPSS 0.57%May 16, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module.Check if you run itEPSS 0.46%May 16, 2025
- High8.7A vulnerability was found in Tenda AC7 15.03.06.44.Check if you run itEPSS 1.43%May 16, 2025
- High7.8Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticallCheck if you run itEPSS 0.59%May 16, 2025
- Medium6.9A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 1.25%May 16, 2025
- Low3.1CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names.Check if you run itEPSS 0.43%May 16, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0.Check if you run itEPSS 0.53%May 16, 2025
- Medium5.1A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1.Check if you run itEPSS 0.49%May 16, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.64%May 16, 2025
Sort