Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its page creating functionality.Check if you run itEPSS 0.16%Apr 7, 2026
- High7.5Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Un…Check if you run itEPSS 0.12%Apr 7, 2026
- Medium4.3Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web,…Check if you run itEPSS 0.42%Apr 7, 2026
- Medium5.3The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insufficient Verification of Data Au…Check if you run itEPSS 0.17%Apr 7, 2026
- High8.8The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3.Check if you run itEPSS 0.63%Apr 7, 2026
- Medium6.5The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct…Check if you run itEPSS 0.19%Apr 7, 2026
- Critical9.8In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON We…Check if you run itEPSS 0.54%Apr 7, 2026
- Low2.1A vulnerability was identified in code-projects Online Hotel Booking 1.0.Check if you run itEPSS 0.36%Apr 7, 2026
- UnknownSecurity exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.cloneOpen the advisoryApr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.55%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.36%Apr 7, 2026
- High7.4A weakness has been identified in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.67%Apr 6, 2026
- High7.4A vulnerability was identified in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.69%Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.18%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.37%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.33%Apr 6, 2026
- Low3.7WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%Apr 6, 2026
- Medium6.1SDL_image is a library to load images of various formats as SDL surfaces.Check if you run itEPSS 0.26%Apr 6, 2026
- Medium4.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.26%Apr 6, 2026
- Medium6.1Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.26%Apr 6, 2026
- Critical9.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.17%Apr 6, 2026
- Medium6.1Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.22%Apr 6, 2026
- Medium5.1OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScr…Check if you run itEPSS 0.22%Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.22%Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.23%Apr 6, 2026
Sort