Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.Check if you run itEPSS 0.27%Oct 12, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.Check if you run itEPSS 0.26%Oct 12, 2026
- High8.5Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.Check if you run itEPSS 0.29%Oct 12, 2026
- Medium5.3Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME regist…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.7Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell subst…Check if you run itEPSS 1.22%Oct 12, 2026
- High8.7Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators.Check if you run itEPSS 0.48%Oct 12, 2026
- Medium5.5A vulnerability has been found in Exponent CMS up to 3.0.2patch2.Check if you run itEPSS 0.39%Oct 12, 2026
- High8.8Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user with the “Messages” permissi…Check if you run itEPSS 0.39%Oct 12, 2026
- Critical9.2LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization HeaderCheck if you run itEPSS 0.46%Oct 12, 2026
- Medium5.3LibreNMS before 26.9.0 Stored XSS via wireless sensor descriptionCheck if you run itEPSS 0.20%Oct 12, 2026
- High8.6Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH BypassCheck if you run itEPSS 0.65%Oct 12, 2026
- Medium5.1Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.phpCheck if you run itEPSS 0.21%Oct 12, 2026
- High8.8Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution.Check if you run itEPSS 1.05%Oct 12, 2026
- Medium5.4Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code.Check if you run itEPSS 0.23%Oct 12, 2026
- Medium5.4Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions.Check if you run itEPSS 0.39%Oct 12, 2026
- Low2.0A security flaw has been discovered in Zen Cart up to 2.2.2.Check if you run itEPSS 0.33%Oct 12, 2026
- Low1.2A vulnerability was determined in Zen Cart up to 2.2.2.Check if you run itEPSS 0.33%Oct 12, 2026
- Low2.1A flaw has been found in SEMCMS up to 5.0.Check if you run itEPSS 0.19%Oct 12, 2026
- Medium5.5A security vulnerability has been detected in SEMCMS up to 5.0.Check if you run itEPSS 0.31%Oct 12, 2026
- Medium5.5A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.Check if you run itEPSS 0.25%Oct 12, 2026
- Medium5.3OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents.Check if you run itEPSS 0.27%Oct 11, 2026
- Medium5.5A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6.Check if you run itEPSS 0.32%Oct 11, 2026
- Low2.1A vulnerability was found in InstantSoft icms2 up to 2.18.2.Check if you run itEPSS 0.53%Oct 11, 2026
- Medium5.9InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the…Open the advisoryOct 10, 2026
- Unknownvisualcomposer visual_composer_website_builder Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.87%Oct 8, 2026