Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and inclu…Check if you run itEPSS 0.32%Aug 18, 2026
- Critical9.8incsub forminator Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.09%Aug 18, 2026
- Medium5.3A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0.Check if you run itEPSS 0.22%Aug 18, 2026
- High7.5The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2.Check if you run itEPSS 1.64%Aug 18, 2026
- High8.5A flaw has been found in COMFAST CF-N1-S 2.6.0.1.Check if you run itEPSS 3.18%Aug 18, 2026
- Low2.1A security vulnerability has been detected in sonos tract up to 0.23.4.Check if you run itEPSS 0.59%Aug 18, 2026
- Low2.1A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22.Check if you run itEPSS 0.69%Aug 18, 2026
- Medium5.5A weakness has been identified in PHPGurukul Complaint Management System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- Low2.1A vulnerability was determined in itsourcecode Hospital Management System 1.0.Check if you run itEPSS 0.33%Aug 18, 2026
- Low2.1A vulnerability was found in itsourcecode Hospital Management System 1.0.Check if you run itEPSS 0.33%Aug 18, 2026
- Low2.1A vulnerability has been found in itsourcecode Hospital Management System 1.0.Check if you run itEPSS 0.33%Aug 18, 2026
- Low2.1A flaw has been found in Webkul Bagisto up to 2.4.4.Check if you run itEPSS 0.45%Aug 18, 2026
- Low2.1A vulnerability was detected in Webkul Bagisto up to 2.4.4.Check if you run itEPSS 0.37%Aug 18, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- Medium5.5A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- High8.1motopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Critical10.0wpcompress wp_compress Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.86%Aug 18, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 18, 2026
- Low2.1A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.47%Aug 17, 2026
- High7.8An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.Check if you run itEPSS 0.19%Aug 17, 2026
- Critical9.8An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory componentsCheck if you run itEPSS 0.93%Aug 17, 2026
- Critical9.8A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrar…Check if you run itEPSS 0.87%Aug 17, 2026
- Low2.1A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.47%Aug 17, 2026
- Critical9.6Onyx is an open-source AI platform.Check if you run itEPSS 0.49%Aug 17, 2026
- Critical9.8An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.p…Check if you run itEPSS 0.73%Aug 17, 2026
Sort