Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in CodeAstro Real Estate Management System 1.0.Check if you run itEPSS 0.58%Jun 4, 2025
- High7.3Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.43%Jun 4, 2025
- Medium6.9A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical.Check if you run itEPSS 0.83%Jun 4, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical.Check if you run itEPSS 0.79%Jun 4, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.64%Jun 4, 2025
- Medium4.8A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered.Check if you run itEPSS 0.30%Jun 4, 2025
- High8.8The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inCheck if you run itEPSS 0.56%Jun 4, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.61%Jun 4, 2025
- Medium4.3The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them viaCheck if you run itEPSS 0.16%Jun 4, 2025
- Critical9.8The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticateCheck if you run itEPSS 0.56%Jun 4, 2025
- Medium4.1kro (Kube Resource Orchestrator) 0.1.0 before 0.2.1 allows users (with permission to create or modify ResourceGraphDefinition resources) to supply arbitrary container images.Check if you run itEPSS 0.38%Jun 4, 2025
- Medium5.3D-Link dcs-932l_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 13.94%Jun 4, 2025
- Medium5.3A vulnerability was found in IdeaCMS up to 1.7 and classified as critical.Check if you run itEPSS 1.55%Jun 4, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0.Check if you run itEPSS 0.41%Jun 4, 2025
- Medium6.9A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.49%Jun 4, 2025
- Medium6.4The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all verCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium6.4The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shorCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium6.4The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcCheck if you run itEPSS 0.22%Jun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
- None0.0Not usedOpen the advisoryJun 4, 2025
Sort