Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A weakness has been identified in code-projects Responsive Blog Site 1.0.Check if you run itEPSS 0.31%Sep 3, 2025
- Low2.9Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.Check if you run itEPSS 0.71%Sep 3, 2025
- Medium6.9A vulnerability was identified in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium6.5The AI Engine plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the rest_list and delete_files functions in all versioCheck if you run itEPSS 0.27%Sep 3, 2025
- Medium6.3Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.Check if you run itEPSS 0.34%Sep 3, 2025
- Medium6.9A vulnerability was found in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.42%Sep 3, 2025
- High8.4IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBCheck if you run itEPSS 0.14%Sep 3, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacCheck if you run itEPSS 0.32%Sep 3, 2025
- Medium5.9ImpactThe attacker can validate if a user exists by checking the time login returns.Check if you run itEPSS 0.28%Sep 3, 2025
- Medium4.8SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session.Check if you run itEPSS 0.32%Sep 3, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail MinCheck if you run itEPSS 0.36%Sep 3, 2025
- Medium5.5SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available.Check if you run itEPSS 0.24%Sep 3, 2025
- High8.6Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCRECheck if you run itEPSS 0.37%Sep 3, 2025
- High7.8netfilter: nf_tables: reject duplicate device on updatesCheck if you run itEPSS 0.28%Sep 3, 2025
- Low2.7SummaryUsers with webhook permissions can conduct SSRF via webhooks.Check if you run itEPSS 0.30%Sep 3, 2025
- High7.5The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager loading of request bodies in the Request class constructor.Check if you run itEPSS 0.45%Sep 3, 2025
- Medium4.3The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerCheck if you run itEPSS 0.25%Sep 3, 2025
- Medium6.8Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.39%Sep 3, 2025
- High8.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.72%Sep 3, 2025
- Medium5.3A weakness has been identified in ScriptAndTools Real Estate Management System 1.0.Check if you run itEPSS 0.40%Sep 3, 2025
- High8.8phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.Check if you run itEPSS 0.61%Sep 3, 2025
- High7.2phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the categoryName parameter.Check if you run itEPSS 0.62%Sep 3, 2025
- Medium6.5phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter.Check if you run itEPSS 0.44%Sep 3, 2025
- High7.5A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0.Check if you run itEPSS 0.48%Sep 3, 2025
- High8.1phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter.Check if you run itEPSS 0.44%Sep 3, 2025
Sort