Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0Vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.23%May 11, 2026
- Low1.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.31%May 11, 2026
- Critical9.1Grav is a file-based Web platform.Check if you run itEPSS 2.25%May 11, 2026
- Low2.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.33%May 11, 2026
- Medium6.3docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php.Check if you run itEPSS 0.27%May 11, 2026
- High7.3A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Check if you run itEPSS 0.29%May 11, 2026
- High7.3A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attacker…Check if you run itEPSS 0.29%May 11, 2026
- High7.3A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Check if you run itEPSS 0.29%May 11, 2026
- High7.3A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to e…Check if you run itEPSS 0.29%May 11, 2026
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Check if you run itEPSS 0.24%May 11, 2026
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers…Check if you run itEPSS 0.24%May 11, 2026
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers…Check if you run itEPSS 0.24%May 11, 2026
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to e…Check if you run itEPSS 0.24%May 11, 2026
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attack…Check if you run itEPSS 0.24%May 11, 2026
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Check if you run itEPSS 0.24%May 11, 2026
- Medium5.1ATutor is vulnerable to Reflected XSS in /install/install.php endpoint.Check if you run itEPSS 0.55%May 11, 2026
- Medium5.1ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint.Check if you run itEPSS 0.55%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.81%May 11, 2026
- Unknowngetflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 62.57%May 11, 2026
- Medium5.1WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin setti…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by explo…Check if you run itEPSS 0.21%May 10, 2026
- Medium5.1WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating…Check if you run itEPSS 0.20%May 10, 2026
- Medium6.9WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insu…Check if you run itEPSS 0.15%May 10, 2026
- Medium5.3WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting ma…Check if you run itEPSS 0.13%May 10, 2026
- Medium6.9WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating…Check if you run itEPSS 0.39%May 10, 2026