Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.32%Apr 28, 2026
- Low2.0A flaw has been found in code-projects Online Music Site 1.0.Check if you run itEPSS 0.38%Apr 28, 2026
- Low2.1A vulnerability was found in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.32%Apr 28, 2026
- Medium5.5A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.41%Apr 28, 2026
- High7.2A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions t…Check if you run itEPSS 1.16%Apr 28, 2026
- Medium6.8A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authent…Check if you run itEPSS 0.85%Apr 28, 2026
- High8.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations.Check if you run itEPSS 0.36%Apr 28, 2026
- High8.6Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute ar…Check if you run itEPSS 0.74%Apr 27, 2026
- High8.9A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 3.25%Apr 27, 2026
- High8.8The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1.Check if you run itEPSS 0.56%Apr 27, 2026
- High7.0An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended…Check if you run itEPSS 0.60%Apr 27, 2026
- Low2.1A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0.Check if you run itEPSS 0.32%Apr 27, 2026
- High8.8The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog.Check if you run itEPSS 0.10%Apr 27, 2026
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level p…Check if you run itEPSS 0.54%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.28%Apr 27, 2026
- High8.2When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /a…Check if you run itEPSS 1.03%Apr 27, 2026
- High7.4A security flaw has been discovered in Tenda HG3 2.0 300003070.Check if you run itEPSS 4.37%Apr 27, 2026
- Low1.9A vulnerability was detected in code-projects Chat System 1.0.Check if you run itEPSS 0.35%Apr 27, 2026
- Low2.0A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6.Check if you run itEPSS 0.33%Apr 27, 2026
- Medium6.0An improper ownership management vulnerability has been identified in Moxa’s Secure Router.Check if you run itEPSS 0.35%Apr 27, 2026
- Critical9.3An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5.Check if you run itEPSS 0.31%Apr 27, 2026