Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9A weakness has been identified in Topsec TopACM 3.0.Check if you run itEPSS 4.49%Mar 16, 2026
- Medium4.8A security flaw has been discovered in Tecnick TCExam up to 16.6.0.Check if you run itEPSS 0.36%Mar 16, 2026
- Low1.9A vulnerability was identified in Tecnick TCExam 16.5.0.Check if you run itEPSS 0.36%Mar 16, 2026
- High7.3Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability.Check if you run itEPSS 0.88%Mar 16, 2026
- High8.8Unraid Update Request Path Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.44%Mar 16, 2026
- High8.2xml-security is a library that implements XML signatures and encryption.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.2xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Check if you run itEPSS 0.17%Mar 16, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.40%Mar 16, 2026
- High8.8RealtyScript 4.0.2 SQL Injection via u_id and agent ParametersCheck if you run itEPSS 0.43%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.21%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface.Check if you run itEPSS 0.33%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User CreationCheck if you run itEPSS 0.20%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.27%Mar 15, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Medilazar Core medilazar-core allow…Check if you run itEPSS 0.53%Mar 13, 2026
- High7.2Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices s…Check if you run itEPSS 0.59%Mar 13, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemetechMount Boldman boldman allows PHP Loca…Check if you run itEPSS 0.53%Mar 13, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly Theme Addons greenly-…Check if you run itEPSS 0.53%Mar 13, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly greenly allows PHP Lo…Check if you run itEPSS 0.53%Mar 13, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-booking-man…Check if you run itEPSS 0.53%Mar 13, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Medilink-Core medilink-core allows…Check if you run itEPSS 0.53%Mar 13, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in redqteam Turbo Manager turbo-manager allows PH…Check if you run itEPSS 0.53%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Funlus Oy WPLifeCycle free-php-version-info allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…Check if you run itEPSS 0.30%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notification…Check if you run itEPSS 0.33%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malic…Check if you run itEPSS 0.18%Mar 13, 2026
- High8.7wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the ch…Check if you run itEPSS 0.54%Mar 13, 2026