Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expressions used for parsiCheck if you run itEPSS 0.61%May 23, 2025
- Medium5.3A vulnerability has been found in easysoft zentaopms 21.5_20250307 and classified as critical.Check if you run itEPSS 0.58%May 23, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.75%May 23, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.75%May 23, 2025
- Medium6.9A vulnerability classified as critical was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.75%May 23, 2025
- Medium6.9A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.75%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection.Check if you run itEPSS 0.62%May 23, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, CCheck if you run itEPSS 0.45%May 23, 2025
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Path Traversal.ThisCheck if you run itEPSS 0.55%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Vizeon - Business Consulting vizeon allows PHP LocalCheck if you run itEPSS 0.82%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Capie capie allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.82%May 23, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for WooCommerce scw-bus-seatCheck if you run itEPSS 0.46%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection.Check if you run itEPSS 0.62%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection.Check if you run itEPSS 0.62%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto umberto allows Object Injection.This issue affects Umberto: from n/a through <= 1.2.8.Check if you run itEPSS 0.62%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SpyroPress La Boom allows PHP Local File Inclusion.Check if you run itEPSS 0.82%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House fish-house allows Object Injection.This issue affects Fish House: from n/a through <= 1.2.7.Check if you run itEPSS 0.62%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive Business WordPress Theme enzio alCheck if you run itEPSS 0.82%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SaurabhSharma WP Post Modules for Elementor wp-post-modules-el allows ReflecteCheck if you run itEPSS 0.29%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kiamo - Responsive Business Service WordPress ThemeCheck if you run itEPSS 0.82%May 23, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilCheck if you run itEPSS 0.45%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami ogami allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.82%May 23, 2025
- Critical9.0Unrestricted Upload of File with Dangerous Type vulnerability in joy2012bd JP Students Result Management System Premium allows Upload a Web Shell to a Web Server.Check if you run itEPSS 0.46%May 23, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through <= 2.5.Check if you run itEPSS 0.59%May 23, 2025
- Critical9.8Incorrect Privilege AssignmentPatch nowKEVEPSS 0.52%May 23, 2025
Sort