Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existi…Check if you run itEPSS 0.43%May 23, 2026
- Medium5.1userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header.Check if you run itEPSS 0.15%May 23, 2026
- High8.8Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.36%May 23, 2026
- High7.1WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL…Check if you run itEPSS 0.20%May 23, 2026
- Medium5.3Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests.Check if you run itEPSS 0.13%May 23, 2026
- High8.8Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.33%May 23, 2026
- High8.8Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.Check if you run itEPSS 0.33%May 23, 2026
- High8.8Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.Check if you run itEPSS 0.33%May 23, 2026
- Low1.3A security flaw has been discovered in calcom cal.diy up to 4.9.4.Check if you run itEPSS 0.32%May 23, 2026
- Low2.1A vulnerability was identified in calcom cal.diy up to 4.9.4.Check if you run itEPSS 0.23%May 23, 2026
- Low2.1A vulnerability has been found in omec-project amf up to 2.1.1.Check if you run itEPSS 0.40%May 23, 2026
- Low2.1A vulnerability was detected in omec-project amf up to 2.1.1.Check if you run itEPSS 0.40%May 23, 2026
- Low2.1A security vulnerability has been detected in Edimax BR-6428NS 1.10.Check if you run itEPSS 2.38%May 23, 2026
- Low2.1A weakness has been identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 2.38%May 23, 2026
- High7.4A security flaw has been discovered in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.80%May 23, 2026
- High7.4A vulnerability was identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.80%May 23, 2026
- High8.2The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on…Check if you run itEPSS 0.46%May 23, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.61%May 22, 2026
- High7.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.17%May 22, 2026
- Medium4.3JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.Check if you run itEPSS 0.18%May 22, 2026
- High8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directo…Check if you run itEPSS 0.18%May 22, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.Check if you run itEPSS 0.18%May 22, 2026
- Medium6.9Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.53%May 22, 2026
- Medium6.1Devise is an authentication solution for Rails based on Warden.Check if you run itEPSS 0.32%May 22, 2026
- High7.7TypeBot is a chatbot builder tool.Check if you run itEPSS 0.38%May 22, 2026