Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized…Check if you run itEPSS 0.21%Apr 12, 2026
- High7.1ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.34%Apr 12, 2026
- High8.6Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structur…Check if you run itEPSS 0.21%Apr 12, 2026
- High7.1Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information…Check if you run itEPSS 0.32%Apr 12, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.Check if you run itEPSS 0.41%Apr 12, 2026
- High8.6R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field.Check if you run itEPSS 0.19%Apr 12, 2026
- High7.1ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.16%Apr 12, 2026
- High8.6Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structur…Check if you run itEPSS 0.16%Apr 12, 2026
- High8.6HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string.Check if you run itEPSS 0.21%Apr 12, 2026
- High8.6RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception ha…Check if you run itEPSS 0.19%Apr 12, 2026
- High7.1Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.19%Apr 12, 2026
- Medium5.1MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter.Check if you run itEPSS 0.27%Apr 12, 2026
- Medium5.5A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4.Check if you run itEPSS 0.40%Apr 12, 2026
- Low2.1A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1.Check if you run itEPSS 0.26%Apr 12, 2026
- High8.9A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.77%Apr 12, 2026
- Medium5.5A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.41%Apr 12, 2026
- UnknownUse-of-uninitialized-value in DoTestOneInputOpen the advisoryApr 12, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityPatch nowKEVEPSS 43.38%Apr 12, 2026
- Medium5.5A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7.Check if you run itEPSS 0.31%Apr 11, 2026
- High7.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2.Check if you run itEPSS 0.50%Apr 11, 2026
- High8.8The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.3.Check if you run itEPSS 0.41%Apr 11, 2026
- Medium5.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request F…Check if you run itEPSS 0.36%Apr 11, 2026
- Medium5.4The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.37%Apr 11, 2026
- High7.8NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.21%Apr 11, 2026
- High7.8NoMachine External Control of File Path Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.22%Apr 11, 2026
Sort