Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.Check if you run itEPSS 0.36%Aug 18, 2026
- High8.8Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.Check if you run itEPSS 0.52%Aug 18, 2026
- High8.1Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.Check if you run itEPSS 0.47%Aug 18, 2026
- Critical9.9Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.Check if you run itEPSS 0.48%Aug 18, 2026
- Critical9.9Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.Check if you run itEPSS 0.79%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- High7.5Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.Check if you run itEPSS 0.39%Aug 18, 2026
- High8.1Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.Check if you run itEPSS 0.47%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- High7.5Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.Check if you run itEPSS 0.39%Aug 18, 2026
- Critical9.6Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.Check if you run itEPSS 0.43%Aug 18, 2026
- High8.8Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation.Check if you run itEPSS 0.42%Aug 18, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.11%Aug 18, 2026
- Medium6.0The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified…Check if you run itEPSS 0.73%Aug 18, 2026
- High8.6A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01.Check if you run itEPSS 0.60%Aug 18, 2026
- Medium5.5A vulnerability was identified in code-projects Task Management System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- Medium6.5Clickjacking issue in the Downloads component in Firefox for Android.Check if you run itEPSS 0.27%Aug 18, 2026
- Medium5.4Spoofing issue in the Downloads component in Firefox for Android.Check if you run itEPSS 0.25%Aug 18, 2026
- Medium6.5Clickjacking issue in Firefox for Android.Check if you run itEPSS 0.27%Aug 18, 2026
- Medium5.2External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.Check if you run itEPSS 0.18%Aug 18, 2026
- Medium5.3Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.31%Aug 18, 2026
- High8.4ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticate…Check if you run itEPSS 0.55%Aug 18, 2026
- Critical9.3ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write,…Check if you run itEPSS 0.89%Aug 18, 2026
- High8.7ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 enforces authentication (SASL PLAIN) but performs no authorization: it ne…Check if you run itEPSS 0.59%Aug 18, 2026
Sort