Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A flaw has been found in code-projects Student Admission System 1.0.Check if you run itEPSS 0.27%Jun 2, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.48%Jun 2, 2026
- Medium5.4Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges…Check if you run itEPSS 0.23%Jun 2, 2026
- High7.8A high security vulnerability affecting Security Center main server installations has been identified.Check if you run itEPSS 0.15%Jun 2, 2026
- Medium6.5A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on t…Check if you run itEPSS 0.99%Jun 2, 2026
- Medium6.3A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary…Check if you run itEPSS 0.44%Jun 2, 2026
- High8.8A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a.Check if you run itEPSS 0.76%Jun 2, 2026
- High8.8A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running…Check if you run itEPSS 0.89%Jun 2, 2026
- Medium6.3A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary…Check if you run itEPSS 0.44%Jun 2, 2026
- Medium4.3The Remove NoFollow Commenter URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Tectite Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.4.1.Check if you run itEPSS 0.35%Jun 2, 2026
- Medium4.3The Remove meta boxes per user role plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.01.Check if you run itEPSS 0.20%Jun 2, 2026
- Medium4.3The BirdSeed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.4The Word Replacer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replacement' parameter in all versions up to, and including, 0.4.Check if you run itEPSS 0.39%Jun 2, 2026
- Medium6.1The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.…Check if you run itEPSS 0.21%Jun 2, 2026
- Medium6.4The FPW Category Thumbnails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'fpw_fs_get_file' AJAX action in all versio…Check if you run itEPSS 0.19%Jun 2, 2026
- Medium5.5The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole_link’ parameter in all versions up to, and including, 1.31 due to in…Check if you run itEPSS 0.20%Jun 2, 2026
- Medium4.4The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields (Page Background, Form Background, Text Co…Check if you run itEPSS 0.18%Jun 2, 2026
- Low2.1A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.23%Jun 2, 2026
- Low2.1A weakness has been identified in elunez eladmin up to 2.7.Check if you run itEPSS 1.07%Jun 2, 2026
- High7.5Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and met…Check if you run itEPSS 0.65%Jun 1, 2026
- Medium6.9ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests.Check if you run itEPSS 0.16%Jun 1, 2026