Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability classified as problematic has been found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.29%Jul 19, 2025
- Medium5.1A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.29%Jul 19, 2025
- Medium5.1A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.39%Jul 19, 2025
- Medium5.1A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e.Check if you run itEPSS 0.28%Jul 18, 2025
- High8.7A vulnerability was found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 1.16%Jul 18, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1.Check if you run itEPSS 0.50%Jul 18, 2025
- Medium4.0An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attaCheck if you run itEPSS 0.39%Jul 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points out that epoll is decreCheck if you run itEPSS 0.18%Jul 18, 2025
- Medium4.3The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.Check if you run itEPSS 0.14%Jul 18, 2025
- Medium6.1The Zuppler Online Ordering plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.0.Check if you run itEPSS 0.13%Jul 18, 2025
- Medium6.5An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint.Check if you run itEPSS 1.12%Jul 18, 2025
- High8.7A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 6.73%Jul 17, 2025
- High8.7A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015.Check if you run itEPSS 0.99%Jul 17, 2025
- Medium5.3A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0.Check if you run itEPSS 0.30%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- High8.7A path traversal vulnerability exists in RIPS Scanner version 0.54.Check if you run itEPSS 2.47%Jul 16, 2025
- High8.8A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831.Check if you run itEPSS 2.41%Jul 16, 2025
- High8.7A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS3000 builds, that allows unauthenticated remote attackers toCheck if you run itEPSS 2.35%Jul 16, 2025
- Medium5.8A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgeryCheck if you run itEPSS 0.38%Jul 16, 2025
- Medium4.3A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote atCheck if you run itEPSS 0.37%Jul 16, 2025
- Medium6.9WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.Check if you run itEPSS 0.74%Jul 16, 2025
- High7.1A security vulnerability has been identified in HPE Telco Service Orchestrator software.Check if you run itEPSS 0.25%Jul 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Atakan Au Import CDN-Remote Images import-cdn-remote-images allows Stored XSS.This issue affects Import CDN-Remote Images: from nCheck if you run itEPSS 0.14%Jul 16, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in Kerfred FG Drupal to WordPress fg-drupal-to-wp allows Server Side Request Forgery.This issue affects FG Drupal to WordPress: froCheck if you run itEPSS 0.23%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 74.50%Jul 16, 2025
Sort