Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php.Check if you run itEPSS 0.32%Apr 10, 2026
- Low2.1A vulnerability was found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.32%Apr 10, 2026
- Low2.1A vulnerability has been found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.32%Apr 10, 2026
- Low2.1A flaw has been found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.32%Apr 10, 2026
- Medium5.5A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 10, 2026
- Low1.9A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.35%Apr 10, 2026
- High8.1The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9.Check if you run itEPSS 0.53%Apr 10, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- Medium5.4Dockyard is a Docker container management app.Check if you run itEPSS 0.15%Apr 9, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in…Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.5A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- High8.8MISP is an open source threat intelligence and sharing platform.Check if you run itEPSS 0.66%Apr 9, 2026
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.39%Apr 9, 2026
- High8.8An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium4.3Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.Check if you run itEPSS 0.15%Apr 9, 2026
- High8.8Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanismCheck if you run itEPSS 0.25%Apr 9, 2026
- High8.8AlanWeb SCADA does not enforce authorization for some directories.Check if you run itEPSS 0.46%Apr 9, 2026
- Low2.0A security flaw has been discovered in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.33%Apr 9, 2026
- Low2.0A vulnerability was identified in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.33%Apr 9, 2026
- Low2.0A vulnerability was determined in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.33%Apr 9, 2026
- Medium6.4The Ultimate FAQ Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via FAQ content in all versions up to, and including, 2.4.7.Check if you run itEPSS 0.38%Apr 9, 2026
- Critical9.8The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1.Patch nowKEVEPSS 8.09%Apr 9, 2026
- Medium5.5A vulnerability was found in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.41%Apr 9, 2026
- Low1.9A vulnerability has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Low1.9A flaw has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026