Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints.Check if you run itEPSS 0.73%May 11, 2026
- High7.3SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potent…Check if you run itEPSS 0.50%May 11, 2026
- High7.7Grav is a file-based Web platform.Check if you run itEPSS 0.39%May 11, 2026
- Medium6.2grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.Check if you run itEPSS 0.43%May 11, 2026
- High7.7The form plugin for Grav adds the ability to create and use forms.Check if you run itEPSS 0.45%May 11, 2026
- High8.8Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management.Check if you run itEPSS 0.49%May 11, 2026
- Medium5.4The form plugin for Grav adds the ability to create and use forms.Check if you run itEPSS 0.26%May 11, 2026
- Medium6.9Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4.Check if you run itEPSS 0.33%May 11, 2026
- High7.2Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager.Check if you run itEPSS 0.48%May 11, 2026
- High7.3Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager.Check if you run itEPSS 0.35%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.35%May 11, 2026
- High8.7OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export.Check if you run itEPSS 2.18%May 11, 2026
- High8.7SQL injection vulnerability in pgAdmin 4 Maintenance Tool.Check if you run itEPSS 0.64%May 11, 2026
- Medium4.8Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules.Check if you run itEPSS 0.25%May 11, 2026
- Critical9.4Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules.Check if you run itEPSS 0.65%May 11, 2026
- Medium5.9An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.Check if you run itEPSS 0.59%May 11, 2026
- Medium6.5Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.30%May 11, 2026
- Critical9.4Grav is a file-based Web platform.Check if you run itEPSS 0.56%May 11, 2026
- High8.9Grav is a file-based Web platform.Check if you run itEPSS 0.36%May 11, 2026
- Medium6.5Grav is a file-based Web platform.Check if you run itEPSS 0.40%May 11, 2026
- High8.1Grav is a file-based Web platform.Check if you run itEPSS 0.58%May 11, 2026
- Critical9.1Grav is a file-based Web platform.Check if you run itEPSS 2.25%May 11, 2026
- High7.4A vulnerability was found in D-Link DCS-935L up to 1.10.01.Check if you run itEPSS 1.16%May 11, 2026
- Medium5.1WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the…Check if you run itEPSS 0.17%May 10, 2026
- Medium5.1WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript…Check if you run itEPSS 0.19%May 10, 2026