Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0.Check if you run itEPSS 0.54%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Wazifa System 1.0.Check if you run itEPSS 0.50%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Wazifa System 1.0.Check if you run itEPSS 0.50%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Online Farm System 1.0.Check if you run itEPSS 0.48%Aug 2, 2025
- Medium6.4The Magic Edge – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in all versions up to, and including, 1.1.6 due to insufficient iCheck if you run itEPSS 0.25%Aug 2, 2025
- Medium6.1The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and outputCheck if you run itEPSS 0.28%Aug 2, 2025
- Medium6.4The Custom Word Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘angle’ parameter in all versions up to, and including, 0.3 due to insufficient inpuCheck if you run itEPSS 0.25%Aug 2, 2025
- Medium5.4Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on the 'Notes' page when viewing a job but does not completelyCheck if you run itEPSS 0.37%Aug 2, 2025
- Critical9.8Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions.Check if you run itEPSS 0.71%Aug 2, 2025
- High8.8Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "reports" tab, allowing an authenticated attacker to upload a maliCheck if you run itEPSS 0.67%Aug 2, 2025
- High8.1OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover.Check if you run itEPSS 0.38%Aug 2, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 38.04%Aug 2, 2025
- High7.5Copyparty is a portable file server.Check if you run itEPSS 0.46%Aug 1, 2025
- Critical9.2Files is a module for managing files inside spaces and user profiles.Check if you run itEPSS 0.34%Aug 1, 2025
- Critical9.4nestjs devtools-integration Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 53.31%Aug 1, 2025
- Low2.8Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.15%Aug 1, 2025
- High7.3Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 1.27%Aug 1, 2025
- Medium5.1Files is a module for managing files inside spaces and user profiles.Check if you run itEPSS 0.30%Aug 1, 2025
- High7.2Cursor is a code editor built for programming with AI.Check this weekEPSS 28.52%Aug 1, 2025
- Medium5.3Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.41%Aug 1, 2025
- Medium4.4Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.38%Aug 1, 2025
- Medium6.4Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.51%Aug 1, 2025
- High8.11Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server.Check if you run itEPSS 1.01%Aug 1, 2025
- Critical9.3LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection.Check if you run itEPSS 0.28%Aug 1, 2025
- High8.7A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module.Check if you run itEPSS 1.72%Aug 1, 2025
Sort