Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.31%Apr 12, 2026
- Medium5.3Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated u…Check if you run itEPSS 0.13%Apr 12, 2026
- High7.1ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.34%Apr 12, 2026
- High7.1Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information…Check if you run itEPSS 0.32%Apr 12, 2026
- High7.1Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.19%Apr 12, 2026
- Medium5.5A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4.Check if you run itEPSS 0.69%Apr 12, 2026
- High8.8The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.3.Check if you run itEPSS 0.59%Apr 11, 2026
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.34%Apr 11, 2026
- Medium6.3The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor.Check if you run itEPSS 0.66%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Check if you run itEPSS 0.35%Apr 10, 2026
- Medium5.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.41%Apr 10, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.56%Apr 10, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.31%Apr 10, 2026
- Medium5.4Chamilo LMS is a learning management system.Check if you run itEPSS 0.24%Apr 10, 2026
- High8.7OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plugin HTTP routes that incorrectly mint operator.admin runtime scope…Check if you run itEPSS 0.52%Apr 10, 2026
- High8.7OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect.Check if you run itEPSS 0.52%Apr 10, 2026
- High7.2OpenClaw before 2026.3.23 contains an insufficient access control vulnerability in the Gateway agent /reset endpoint that allows callers with operator.write permission…Check if you run itEPSS 0.51%Apr 10, 2026
- High7.1OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, a…Check if you run itEPSS 0.33%Apr 10, 2026
- Medium5.3OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers.Check if you run itEPSS 0.53%Apr 10, 2026
- High8.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.46%Apr 10, 2026
- High8.6CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list…Check if you run itEPSS 0.66%Apr 10, 2026
- Medium5.4OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which…Check if you run itEPSS 0.30%Apr 10, 2026
- Critical9.6A Stored Cross-Site Scripting (XSS) vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.0.Check if you run itEPSS 1.26%Apr 10, 2026
- Medium6.4The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the , , and post meta values in all versions up to, and including,…Check if you run itEPSS 0.20%Apr 10, 2026
- Low1.9A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.35%Apr 10, 2026