Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3A flaw was found in the AAP gateway.Check if you run itEPSS 0.57%May 4, 2026
- Low2.1A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.32%May 4, 2026
- Critical9.9A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1.Check if you run itEPSS 0.46%May 4, 2026
- Medium5.5A flaw has been found in funadmin up to 7.1.0-rc6.Check if you run itEPSS 0.50%May 4, 2026
- Medium5.5A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6.Check if you run itEPSS 0.79%May 4, 2026
- Critical9.3An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5.Check if you run itEPSS 0.36%May 4, 2026
- Unknownmetagauss registrationmagic Improper Privilege ManagementPatch nowKEVEPSS 1.65%May 4, 2026
- Unknownsitesao dhvc_form Incorrect Privilege AssignmentPatch nowKEVEPSS 0.55%May 4, 2026
- Unknowncontempothemes real_estate_7 Incorrect Privilege AssignmentPatch nowKEVEPSS 0.78%May 4, 2026
- UnknownFavethemes homey Improper Privilege ManagementPatch nowKEVEPSS 0.43%May 4, 2026
- Low2.1A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110.Check if you run itEPSS 4.39%May 3, 2026
- Low2.1A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110.Check if you run itEPSS 4.39%May 3, 2026
- Low2.1A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110.Check if you run itEPSS 5.99%May 3, 2026
- Medium6.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack.Check if you run itEPSS 0.34%May 3, 2026
- Low2.0A vulnerability was determined in kerwincui FastBee up to 1.2.1.Check if you run itEPSS 0.33%May 3, 2026
- Low2.0A vulnerability was detected in crmeb_java up to 1.3.4.Check if you run itEPSS 0.38%May 3, 2026
- High8.1The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference…Check if you run itEPSS 0.49%May 2, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- Medium5.3The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.42%May 2, 2026
- Medium4.4The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme.Check if you run itEPSS 0.32%May 2, 2026
- Medium4.4The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2.0 due…Check if you run itEPSS 0.33%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versions up to and including 2.10.0.Check if you run itEPSS 0.31%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.30%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.33%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.32%May 2, 2026