Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the…Check if you run itEPSS 1.70%May 23, 2026
- High8.6SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute a…Check if you run itEPSS 0.16%May 23, 2026
- High8.6Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms.Check if you run itEPSS 0.16%May 23, 2026
- Medium5.3Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated u…Check if you run itEPSS 0.13%May 23, 2026
- High8.7Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions.Check if you run itEPSS 0.45%May 23, 2026
- High7.1WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database…Check if you run itEPSS 0.21%May 23, 2026
- High8.8Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting…Check if you run itEPSS 0.36%May 23, 2026
- Critical9.3userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existi…Check if you run itEPSS 0.43%May 23, 2026
- Medium5.1userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header.Check if you run itEPSS 0.15%May 23, 2026
- High8.8Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.36%May 23, 2026
- High7.1WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMa…Check if you run itEPSS 0.21%May 23, 2026
- High7.1WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL…Check if you run itEPSS 0.20%May 23, 2026
- High8.610-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code.Check if you run itEPSS 0.17%May 23, 2026
- High8.610-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execu…Check if you run itEPSS 0.16%May 23, 2026
- Medium5.3Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests.Check if you run itEPSS 0.13%May 23, 2026
- High8.8Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.33%May 23, 2026
- High8.8Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.Check if you run itEPSS 0.33%May 23, 2026
- High8.8Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.Check if you run itEPSS 0.33%May 23, 2026
- Low2.9A security vulnerability has been detected in QuantumNous new-api up to 0.12.1.Check if you run itEPSS 0.29%May 23, 2026
- Low2.1A weakness has been identified in QuantumNous new-api up to 0.12.1.Check if you run itEPSS 0.19%May 23, 2026
- Low1.3A security flaw has been discovered in calcom cal.diy up to 4.9.4.Check if you run itEPSS 0.20%May 23, 2026
- Low2.1A vulnerability was identified in calcom cal.diy up to 4.9.4.Check if you run itEPSS 0.19%May 23, 2026
- Low2.1A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9.Check if you run itEPSS 0.24%May 23, 2026
- Low2.1A vulnerability was found in omec-project amf up to 2.1.1.Check if you run itEPSS 0.23%May 23, 2026
- Low2.1A vulnerability has been found in omec-project amf up to 2.1.1.Check if you run itEPSS 0.23%May 23, 2026
Sort