Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017.Check if you run itEPSS 9.55%Mar 22, 2026
- High8.8The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4.Check if you run itEPSS 0.30%Mar 22, 2026
- Medium6.4The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the block attribute in a…Check if you run itEPSS 0.20%Mar 22, 2026
- Medium6.9ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash the application by supplying a…Check if you run itEPSS 0.19%Mar 22, 2026
- Medium6.9BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplyin…Check if you run itEPSS 0.17%Mar 22, 2026
- Medium6.9BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the appl…Check if you run itEPSS 0.18%Mar 22, 2026
- Medium6.9Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field.Check if you run itEPSS 0.18%Mar 22, 2026
- Medium6.9Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field.Check if you run itEPSS 0.18%Mar 22, 2026
- Medium6.9RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplyin…Check if you run itEPSS 0.19%Mar 22, 2026
- Medium6.9RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by submitting excessively long input.Check if you run itEPSS 0.18%Mar 22, 2026
- Low1.9A security flaw has been discovered in apconw Aix-DB up to 1.2.3.Check if you run itEPSS 0.14%Mar 22, 2026
- High7.4A vulnerability was identified in D-Link DHP-1320 1.00WWB04.Check if you run itEPSS 0.66%Mar 21, 2026
- High7.1i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php.Check if you run itEPSS 0.38%Mar 21, 2026
- High8.8i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.36%Mar 21, 2026
- High8.8ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.Check if you run itEPSS 0.33%Mar 21, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.Check if you run itEPSS 1.11%Mar 21, 2026
- High8.8phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idn…Check if you run itEPSS 0.38%Mar 21, 2026
- Medium6.8SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in…Check if you run itEPSS 0.90%Mar 21, 2026
- High8.8Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.34%Mar 21, 2026
- High8.8SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.34%Mar 21, 2026
- High7.1Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences.Check if you run itEPSS 1.12%Mar 21, 2026
- High7.1Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.Check if you run itEPSS 0.35%Mar 21, 2026
- Low2.1A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1.Check if you run itEPSS 0.25%Mar 21, 2026
- Medium6.9NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field.Check if you run itEPSS 0.16%Mar 21, 2026
- Medium6.9MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing a…Check if you run itEPSS 0.18%Mar 21, 2026
Sort