Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was found in HuangDou UTCMS 9.Check if you run itEPSS 0.38%Aug 25, 2025
- Critical9.8SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive information via a crafted HTTP request with action=service_detail.Check if you run itEPSS 0.45%Aug 25, 2025
- Medium5.4File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller.Check if you run itEPSS 0.21%Aug 25, 2025
- High7.0D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en val and id parameters in the qj_asp function.Check if you run itEPSS 0.45%Aug 25, 2025
- Critical9.8An issue was discovered in getrebuild/rebuild 4.0.4.Check if you run itEPSS 0.69%Aug 25, 2025
- High8.6Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP ObjectCheck if you run itEPSS 0.73%Aug 25, 2025
- Medium5.3A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a cCheck if you run itEPSS 1.74%Aug 25, 2025
- Critical9.8Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing aCheck if you run itEPSS 0.60%Aug 25, 2025
- Medium5.1Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.Check if you run itEPSS 0.27%Aug 25, 2025
- Medium6.5Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location.Check if you run itEPSS 0.43%Aug 25, 2025
- Medium5.3A vulnerability was identified in wangsongyan wblog 0.0.1.Check if you run itEPSS 0.28%Aug 24, 2025
- High7.2The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includingCheck if you run itEPSS 0.31%Aug 23, 2025
- Medium4.3The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.Check if you run itEPSS 0.11%Aug 23, 2025
- Medium4.3The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6.Check if you run itEPSS 0.13%Aug 23, 2025
- Medium4.3The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Aug 23, 2025
- Unknownhongdian h8922 Direct Request ('Forced Browsing')Patch nowKEVEPSS 2.79%Aug 23, 2025
- High8.8In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB.Check if you run itEPSS 0.34%Aug 22, 2025
- High8.1UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.44%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: mark K1 pll1_d8 as critical The pll1_d8 clock is enabled by the boot loader, and is ultimately aCheck if you run itEPSS 0.14%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.3.Check if you run itEPSS 0.14%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: fromCheck if you run itEPSS 0.14%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics fCheck if you run itEPSS 0.13%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a throuCheck if you run itEPSS 0.13%Aug 22, 2025
- Medium5.9The WP Crontrol plugin for WordPress is vulnerable to blind Server-Side Request Forgery in versions 1.17.0 to 1.19.1 via the 'wp_remote_request' function.Check if you run itEPSS 0.36%Aug 22, 2025
- High8.1An issue was discovered in Shopizer 3.2.7.Check if you run itEPSS 0.22%Aug 22, 2025
Sort