Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability was identified in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.20%May 24, 2026
- Low2.9A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4.Check if you run itEPSS 0.20%May 24, 2026
- Medium5.5A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16.Check if you run itEPSS 0.38%May 24, 2026
- Low2.1A weakness has been identified in Edimax EW-7438RPn 1.12.Check if you run itEPSS 1.91%May 24, 2026
- Low2.1A vulnerability was identified in Edimax EW-7438RPn 1.28a.Check if you run itEPSS 2.30%May 24, 2026
- Low2.1A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2.Check if you run itEPSS 0.33%May 24, 2026
- Low2.0A vulnerability was found in vBulletin 6.x.Check if you run itEPSS 0.28%May 24, 2026
- Medium5.5A weakness has been identified in NousResearch hermes-agent up to 2026.4.23.Check if you run itEPSS 0.29%May 24, 2026
- Medium5.5A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16.Check if you run itEPSS 0.28%May 24, 2026
- Low2.1A weakness has been identified in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 2.50%May 23, 2026
- High8.7D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the…Check if you run itEPSS 0.58%May 23, 2026
- Critical9.3Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the…Check if you run itEPSS 1.70%May 23, 2026
- High8.6SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute a…Check if you run itEPSS 0.16%May 23, 2026
- High8.6Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms.Check if you run itEPSS 0.16%May 23, 2026
- Medium5.3Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated u…Check if you run itEPSS 0.13%May 23, 2026
- High8.7Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions.Check if you run itEPSS 0.45%May 23, 2026
- High7.1WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database…Check if you run itEPSS 0.21%May 23, 2026
- High8.8Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting…Check if you run itEPSS 0.36%May 23, 2026
- Critical9.3userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existi…Check if you run itEPSS 0.43%May 23, 2026
- Medium5.1userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header.Check if you run itEPSS 0.15%May 23, 2026
- High8.8Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.36%May 23, 2026
- High7.1WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMa…Check if you run itEPSS 0.21%May 23, 2026
- High7.1WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL…Check if you run itEPSS 0.20%May 23, 2026
- High8.610-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code.Check if you run itEPSS 0.17%May 23, 2026
- High8.610-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execu…Check if you run itEPSS 0.16%May 23, 2026
Sort