Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A flaw has been found in Webkul Bagisto up to 2.4.4.Check if you run itEPSS 0.45%Aug 18, 2026
- Low2.1A vulnerability was detected in Webkul Bagisto up to 2.4.4.Check if you run itEPSS 0.37%Aug 18, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- Medium5.5A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- High8.1motopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Critical10.0wpcompress wp_compress Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.86%Aug 18, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 18, 2026
- Low2.1A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.47%Aug 17, 2026
- High7.8An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.Check if you run itEPSS 0.19%Aug 17, 2026
- Critical9.8An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory componentsCheck if you run itEPSS 0.93%Aug 17, 2026
- Critical9.8A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrar…Check if you run itEPSS 0.87%Aug 17, 2026
- Low2.1A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0.Check if you run itEPSS 0.47%Aug 17, 2026
- Critical9.6Onyx is an open-source AI platform.Check if you run itEPSS 0.49%Aug 17, 2026
- Critical9.8An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.p…Check if you run itEPSS 0.73%Aug 17, 2026
- UnknownHCSEC-2026-29 - Packer vulnerable to arbitrary file write via crafted plugin archive during installationCheck if you run itEPSS 0.19%Aug 17, 2026
- UnknownCVE-2026-74234Open the advisoryAug 17, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 10.02%Aug 17, 2026
- Unknown[20260810] - Core - Unrestricted uploads of SHTML filesCheck if you run itEPSS 0.65%Aug 17, 2026
- Unknown[20260809] - Core - Improper ACL checks when injection schema.org contact dataCheck if you run itEPSS 0.29%Aug 17, 2026
- Unknown[20260808] - Core - Improper ACL checks for batch copy actionsCheck if you run itEPSS 0.29%Aug 17, 2026
- Unknown[20260807] - Core - MFA Authentication BypassCheck if you run itEPSS 0.46%Aug 17, 2026
- Unknown[20260806] - Core - XSS through schema.org outputsCheck if you run itEPSS 0.27%Aug 17, 2026
- Unknown[20260805] - Core - Improper ACL checks for category webservice endpointsCheck if you run itEPSS 0.26%Aug 17, 2026
- Unknown[20260804] - Core - Improper ACL checks for custom fields webservice endpointsCheck if you run itEPSS 0.26%Aug 17, 2026
- Unknown[20260803] - Core - Inconsistent ACL checks for mutating webservice endpointsCheck if you run itEPSS 0.34%Aug 17, 2026
Sort