Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admin users…Check if you run itEPSS 0.48%May 6, 2026
- High8.7Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated users to ex…Check if you run itEPSS 0.95%May 6, 2026
- Critical9.2Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to a…Check if you run itEPSS 0.64%May 6, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync T-series…Check if you run itEPSS 0.58%May 6, 2026
- Medium4.9The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1.Check if you run itEPSS 0.83%May 6, 2026
- Medium4.8PhpSpreadsheet is a library for reading and writing spreadsheet files.Check if you run itEPSS 0.24%May 5, 2026
- Critical9.2PhpSpreadsheet is a library for reading and writing spreadsheet files.Check if you run itEPSS 0.78%May 5, 2026
- High8.8The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4.Check if you run itEPSS 0.79%May 5, 2026
- Low2.1A vulnerability was identified in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.32%May 5, 2026
- Medium6.5The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5.Check if you run itEPSS 0.67%May 5, 2026
- Medium6.1The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.18%May 5, 2026
- Medium4.9The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the AJAX route.Check if you run itEPSS 0.64%May 5, 2026
- Low2.1A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1.Check if you run itEPSS 0.32%May 5, 2026
- Low2.1A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1.Check if you run itEPSS 0.36%May 4, 2026
- High7.2OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)Check if you run itEPSS 0.53%May 4, 2026
- High8.7Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class…Check if you run itEPSS 0.60%May 4, 2026
- High8.2The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows…Check if you run itEPSS 0.60%May 4, 2026
- Medium5.7Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent functionCheck if you run itEPSS 0.47%May 4, 2026
- Low2.1A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.32%May 4, 2026
- High8.1phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning.Check if you run itEPSS 0.44%May 4, 2026
- Medium5.5A flaw has been found in funadmin up to 7.1.0-rc6.Check if you run itEPSS 0.50%May 4, 2026
- Low2.1A vulnerability was detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.35%May 4, 2026
- Low2.1A security vulnerability has been detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.32%May 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.Check if you run itEPSS 0.32%May 4, 2026
- Unknowncridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.40%May 4, 2026