Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows BlCheck if you run itEPSS 0.27%Aug 14, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single SignCheck if you run itEPSS 0.61%Aug 14, 2025
- Medium6.9A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0.Check if you run itEPSS 0.42%Aug 14, 2025
- Critical9.8FlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 75.20%Aug 14, 2025
- Medium5.3A vulnerability was found in D-Link DIR‑818L up to 1.05B01.Check this weekEPSS 23.46%Aug 14, 2025
- Medium5.1Lepszy BIP is vulnerable to Reflected Cross-Site Scripting (XSS).Check if you run itEPSS 0.45%Aug 14, 2025
- Critical9.8The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an aCheck if you run itEPSS 0.44%Aug 14, 2025
- Critical9.8FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.54%Aug 14, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.54%Aug 14, 2025
- High7.1Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set.Check if you run itEPSS 0.11%Aug 14, 2025
- Medium5.3A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potenCheck if you run itEPSS 0.30%Aug 14, 2025
- High7.5Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via network.Check if you run itEPSS 1.26%Aug 14, 2025
- Medium6.9A vulnerability was identified in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.43%Aug 14, 2025
- Medium6.9A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0.Check if you run itEPSS 0.44%Aug 14, 2025
- Medium6.5The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roCheck if you run itEPSS 0.32%Aug 14, 2025
- Medium6.9A vulnerability was found in Campcodes Online Flight Booking Management System 1.0.Check if you run itEPSS 0.42%Aug 14, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1.Check if you run itEPSS 0.43%Aug 14, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Recruitment Management System 1.0.Check if you run itEPSS 0.43%Aug 14, 2025
- High8.3Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.Check if you run itEPSS 0.39%Aug 14, 2025
- High8.6A vulnerability was identified in D-Link DIR-825 2.10.Check if you run itEPSS 0.98%Aug 14, 2025
- Medium6.9A vulnerability was determined in projectworlds Visitor Management System 1.0.Check if you run itEPSS 0.43%Aug 14, 2025
- Medium6.9A vulnerability was found in projectworlds Visitor Management System 1.0.Check if you run itEPSS 0.41%Aug 14, 2025
- Medium6.9A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0.Check if you run itEPSS 0.44%Aug 14, 2025
- Medium6.1The Injection Guard WordPress plugin before 1.2.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected CroCheck if you run itEPSS 0.22%Aug 14, 2025
- Medium6.1The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couldCheck if you run itEPSS 0.22%Aug 14, 2025
Sort