Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0.Check if you run itEPSS 0.34%May 26, 2026
- Low2.1A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem.Check if you run itEPSS 0.34%May 26, 2026
- Medium6.5A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 f…Check if you run itEPSS 0.23%May 26, 2026
- High7.5Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.Check if you run itEPSS 0.46%May 26, 2026
- Critical9.1Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.Check if you run itEPSS 0.50%May 26, 2026
- Low1.8The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provide…Check if you run itEPSS 0.26%May 26, 2026
- Medium5.5A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem.Check if you run itEPSS 0.39%May 26, 2026
- Low2.1A vulnerability was detected in Totolink CA750-PoE 6.2c.510.Check this weekEPSS 10.38%May 26, 2026
- Critical9.8Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeat…Check if you run itEPSS 0.49%May 26, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 70.29%May 26, 2026
- Low2.1A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510.Check this weekEPSS 10.38%May 25, 2026
- Low2.1A weakness has been identified in Totolink CA750-PoE 6.2c.510.Check if you run itEPSS 1.16%May 25, 2026
- Low2.1A security flaw has been discovered in Totolink CA750-PoE 6.2c.510.Check if you run itEPSS 1.16%May 25, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection.Check if you run itEPSS 0.37%May 25, 2026
- High7.5Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.29%May 25, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS.Patch nowKEVEPSS 0.20%May 25, 2026
- Medium6.5Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation.Check if you run itEPSS 0.35%May 25, 2026
- High8.8Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation.Check if you run itEPSS 0.39%May 25, 2026
- High7.5Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.30%May 25, 2026
- Medium6.3Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.20%May 25, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine allows SQL Injection.Check if you run itEPSS 0.37%May 25, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection.Check if you run itEPSS 0.37%May 25, 2026
- Medium6.5Missing Authorization vulnerability in SePay team SePay Gateway allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.26%May 25, 2026
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in bgermann CformsII allows Cross Site Request Forgery.Check if you run itEPSS 0.13%May 25, 2026
- Medium5.4Missing Authorization vulnerability in Linethemes NanoCare allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.22%May 25, 2026
Sort