Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability has been found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.41%Apr 27, 2026
- Medium5.5A flaw has been found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.41%Apr 27, 2026
- Medium5.5A vulnerability was detected in CodePanda Source canteen_management_system 1.0.Check if you run itEPSS 0.41%Apr 27, 2026
- Medium5.5A vulnerability was detected in code-projects Employee Management System 1.0.Check if you run itEPSS 0.41%Apr 26, 2026
- Low2.1A vulnerability was found in GreenCMS up to 2.3.Check if you run itEPSS 0.35%Apr 26, 2026
- Low2.1A vulnerability has been found in GreenCMS up to 2.3.Check if you run itEPSS 0.35%Apr 26, 2026
- Low2.0A security flaw has been discovered in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.33%Apr 26, 2026
- Medium5.5A vulnerability was found in Typecho up to 1.3.0.Check if you run itEPSS 0.47%Apr 26, 2026
- Medium6.9A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1.Check if you run itEPSS 0.40%Apr 25, 2026
- Low2.0A vulnerability was identified in pagekit up to 1.0.18.Check if you run itEPSS 0.38%Apr 25, 2026
- Medium5.3A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0.Check if you run itEPSS 0.32%Apr 25, 2026
- Low2.0A vulnerability was detected in JiZhiCMS up to 2.5.6.Check if you run itEPSS 0.33%Apr 25, 2026
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…Check if you run itEPSS 0.19%Apr 24, 2026
- Medium5.3The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_…Check if you run itEPSS 0.43%Apr 24, 2026
- High8.1The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3.Check if you run itEPSS 1.14%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Check if you run itEPSS 0.42%Apr 24, 2026
- Medium5.3The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2.Check if you run itEPSS 0.52%Apr 24, 2026
- High8.2Open Source Social Network (OSSN) is open-source social networking software developed in PHP.Check if you run itEPSS 0.66%Apr 24, 2026
- Critical9.3Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads.Check if you run itEPSS 0.67%Apr 23, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 0.69%Apr 23, 2026
- Critical9.9Froxlor is open source server administration software.Check if you run itEPSS 0.75%Apr 23, 2026
- Medium6.9Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side…Check if you run itEPSS 1.11%Apr 22, 2026
- Critical9.3Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executa…Check if you run itEPSS 4.43%Apr 22, 2026
- High7.1Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.ph…Check if you run itEPSS 3.63%Apr 22, 2026
- High8.8Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php…Check if you run itEPSS 3.07%Apr 22, 2026