Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Quiz and Survey Master (QSM) WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in adminCheck if you run itEPSS 0.12%Aug 14, 2025
- Medium5.4The Structured Content (JSON-LD) #wpsc WordPress plugin before 1.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the bloCheck if you run itEPSS 0.17%Aug 14, 2025
- Low2.1TOTOLINK n350r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.13%Aug 14, 2025
- Medium6.9A vulnerability was determined in 1000 Projects Sales Management System 1.0.Check if you run itEPSS 0.53%Aug 14, 2025
- Medium5.3A vulnerability was determined in code-projects Medical Store Management System 1.0.Check if you run itEPSS 0.41%Aug 14, 2025
- Medium5.3A vulnerability was found in code-projects Medical Store Management System 1.0.Check if you run itEPSS 0.41%Aug 14, 2025
- Unknownthememove unicamp Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.49%Aug 14, 2025
- High7.5An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packCheck if you run itEPSS 0.34%Aug 14, 2025
- Medium5.9The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled deviceCheck if you run itEPSS 0.14%Aug 14, 2025
- Medium6.5The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or maliciousCheck if you run itEPSS 0.33%Aug 14, 2025
- High8.8The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface.Check if you run itEPSS 0.57%Aug 14, 2025
- High8.8The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/atCmd.Check this weekEPSS 23.16%Aug 14, 2025
- Medium5.2An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later).Check if you run itEPSS 0.12%Aug 14, 2025
- Medium6.5Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.33%Aug 13, 2025
- Medium6.5Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.33%Aug 13, 2025
- Medium6.6pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.48%Aug 13, 2025
- High7.1External Secrets Operator is a Kubernetes operator that integrates external secret management systems.Check if you run itEPSS 0.37%Aug 13, 2025
- Medium5.7Part-DB is an open source inventory management system for electronic components.Check if you run itEPSS 0.37%Aug 13, 2025
- Low2.7Active Record connects classes to relational database tables.Check if you run itEPSS 0.59%Aug 13, 2025
- Medium5.3A vulnerability has been found in code-projects Medical Store Management System 1.0.Check if you run itEPSS 0.41%Aug 13, 2025
- Medium5.3A vulnerability was identified in code-projects Medical Store Management System 1.0.Check if you run itEPSS 0.41%Aug 13, 2025
- Critical10.0WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into incluCheck if you run itEPSS 2.46%Aug 13, 2025
- Critical9.3Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation thatCheck if you run itEPSS 4.03%Aug 13, 2025
- Critical10.0Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script.Check if you run itEPSS 2.30%Aug 13, 2025
- Critical10.0Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality.Check if you run itEPSS 5.80%Aug 13, 2025
Sort