Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.44%May 19, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.49%May 19, 2026
- Medium5.1Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.47%May 19, 2026
- Medium4.8CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.27%May 19, 2026
- Medium6.6CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.69%May 19, 2026
- Critical9.5HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js…Check if you run itEPSS 1.49%May 19, 2026
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.66%May 19, 2026
- High7.5The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6.Check if you run itEPSS 0.51%May 19, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.87%May 19, 2026
- High7.1The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize().Check if you run itEPSS 0.50%May 19, 2026
- Critical9.2The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input.Check if you run itEPSS 1.86%May 19, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.87%May 19, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 4.54%May 19, 2026
- High7.2FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.87%May 18, 2026
- Medium6.1SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module.Check if you run itEPSS 0.27%May 18, 2026
- Medium6.1HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input…Check if you run itEPSS 0.34%May 18, 2026
- Medium6.1HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input usi…Check if you run itEPSS 0.41%May 18, 2026
- High7.5HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.Check if you run itEPSS 3.00%May 18, 2026
- High7.5HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.Check if you run itEPSS 1.84%May 18, 2026
- High7.5An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and…Check if you run itEPSS 0.52%May 18, 2026
- Medium6.3A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.Check if you run itEPSS 0.27%May 18, 2026
- Medium5.3A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2.Check if you run itEPSS 0.57%May 18, 2026
- Medium5.5A flaw has been found in projectworlds hospital-management-system-in-php 1.0.Check if you run itEPSS 0.41%May 18, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.73%May 18, 2026
- Low2.1A security vulnerability has been detected in kalcaddle Kodbox up to 1.64.Check if you run itEPSS 2.38%May 17, 2026