Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3.Check if you run itEPSS 0.56%Apr 7, 2026
- Critical9.8In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON We…Check if you run itEPSS 0.54%Apr 7, 2026
- Medium5.4The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated…Check if you run itEPSS 0.14%Apr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.97%Apr 7, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.39%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.40%Apr 6, 2026
- Medium4.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.33%Apr 6, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.19%Apr 6, 2026
- High8.8Brave CMS is an open-source CMS.Check if you run itEPSS 0.48%Apr 6, 2026
- Medium4.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.15%Apr 6, 2026
- Medium4.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.15%Apr 6, 2026
- Critical9.3Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs.Check if you run itEPSS 0.88%Apr 6, 2026
- Low2.1A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Check if you run itEPSS 0.45%Apr 6, 2026
- High7.2Ajenti is a Linux and BSD modular server admin panel.Check if you run itEPSS 0.38%Apr 6, 2026
- High7.2Chyrp Lite is an ultra-lightweight blogging engine.Check if you run itEPSS 0.87%Apr 6, 2026
- Low1.9A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Check if you run itEPSS 0.35%Apr 6, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.56%Apr 6, 2026
- Critical10.0Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 1.65%Apr 6, 2026
- Medium5.1Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium4.8Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 0.29%Apr 6, 2026
- Medium6.1Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 0.37%Apr 6, 2026
- Medium6.1Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium6.1Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 0.32%Apr 6, 2026
- High7.2GLPI is a free asset and IT management software package.Check if you run itEPSS 0.54%Apr 6, 2026
- Medium5.5A vulnerability was found in code-projects Online Application System for Admission 1.0.Check if you run itEPSS 0.51%Apr 6, 2026