Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize() without class restrictions…Check if you run itEPSS 0.51%Oct 15, 2026
- High8.7GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium6.5Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.Check if you run itEPSS 1.12%Oct 15, 2026
- Medium6.9Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.37%Oct 15, 2026
- High7.5Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.35%Oct 15, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium5.7Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium5.9OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.43%Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.27%Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.73%Oct 15, 2026
- High8.7In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth.Check if you run itEPSS 0.52%Oct 15, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.21%Oct 15, 2026
- Critical9.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.42%Oct 15, 2026
- High8.7In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for…Check if you run itEPSS 0.51%Oct 15, 2026
- High8.7Symfony is a PHP framework for web and console applications and a set of reusable PHP components.Check if you run itEPSS 0.37%Oct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- Critical9.8WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerabilityCheck if you run itEPSS 0.31%Oct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- High8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.Check if you run itEPSS 0.47%Oct 15, 2026
- High7.7FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared moduleCheck if you run itEPSS 0.23%Oct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- UnknownMalicious code in saeka (PyPI)Open the advisoryOct 14, 2026