Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server.Check if you run itEPSS 0.43%May 23, 2025
- High8.8Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate wc-affiliate allows Object Injection.This issue affects WC Affiliate: from n/a through <= 2.16.Check if you run itEPSS 0.47%May 23, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Software Binary MLM Plan binary-mlm-plan allows SQL Injection.ThisCheck if you run itEPSS 0.35%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-lCheck if you run itEPSS 0.66%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.ThisCheck if you run itEPSS 0.23%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange miniOrange Discord Integration miniorange-discorCheck if you run itEPSS 0.66%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-tidy-tags xili-tidy-tags allows Reflected XSS.ThisCheck if you run itEPSS 0.23%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit FunnelCockpit funnelcockpit allows Reflected XSS.This issue affeCheck if you run itEPSS 0.23%May 23, 2025
- High8.8Missing Authorization vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allows Privilege Escalation.This issue affects Lead Form Data ColCheck if you run itEPSS 0.36%May 23, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V.Check if you run itEPSS 0.46%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Reflected XSS.This issCheck if you run itEPSS 0.23%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verge3D verge3d allows Reflected XSS.This issue affects Verge3D:Check if you run itEPSS 0.23%May 23, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Path Traversal.This issue affects WPCheck if you run itEPSS 0.52%May 23, 2025
- Medium6.5Missing Authorization vulnerability in Leadinfo Leadinfo leadinfo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadinfo: from n/a throCheck if you run itEPSS 0.31%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catkin ReDi Restaurant Reservation redi-restaurant-reservation allows ReflecteCheck if you run itEPSS 0.23%May 23, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support majestic-support allows SQL Injection.This iCheck if you run itEPSS 0.37%May 23, 2025
- Medium6.5Missing Authorization vulnerability in dastan800 Visual Header visual-header allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual HeadeCheck if you run itEPSS 0.31%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This issue affects Kids Planet: from n/a through <= 2.2.14.Check if you run itEPSS 0.50%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros - Pagaleve wc-pagaleve allows Object Injection.This issue affects Pix 4x sem juros - Pagaleve: from n/aCheck if you run itEPSS 0.53%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File InclCheck if you run itEPSS 0.66%May 23, 2025
- Medium6.1Iridium Certus 700 version 1.0.1 has an embedded credentials vulnerability in the code.Check if you run itEPSS 0.15%May 23, 2025
- Medium6.3The Intellian C700 web panel allows you to add firewall rules.Check if you run itEPSS 0.46%May 23, 2025
- Medium6.9The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file.Check if you run itEPSS 0.23%May 23, 2025
- High8.7A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.Check if you run itEPSS 0.41%May 23, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.51%May 23, 2025
Sort