Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.28%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.21%May 4, 2026
- High7.5A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.34%May 4, 2026
- High8.8An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 1.68%May 4, 2026
- Low2.1A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6.Check if you run itEPSS 0.27%May 4, 2026
- Low2.1A security vulnerability has been detected in MindsDB up to 26.01.Check if you run itEPSS 0.30%May 4, 2026
- Medium5.5A weakness has been identified in MindsDB up to 26.01.Check if you run itEPSS 0.28%May 4, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0.Check if you run itEPSS 0.40%May 4, 2026
- Medium4.9Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel.Check if you run itEPSS 0.34%May 4, 2026
- Unknownsitesao dhvc_form Incorrect Privilege AssignmentPatch nowKEVEPSS 0.55%May 4, 2026
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Unknownicegram icegram_express Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%May 4, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.86%May 4, 2026
- UnknownThemeREX addons Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.89%May 4, 2026
- Unknowncontempothemes real_estate_7 Incorrect Privilege AssignmentPatch nowKEVEPSS 0.78%May 4, 2026
- UnknownFavethemes homey Improper Privilege ManagementPatch nowKEVEPSS 0.43%May 4, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.15%May 4, 2026
- Unknownthrivethemes thrive_themes_builder Missing AuthorizationPatch nowKEVEPSS 0.36%May 4, 2026
- UnknownWordPress wordpress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 79.66%May 4, 2026
- Low2.1A vulnerability was identified in janeczku Calibre-Web up to 0.6.26.Check if you run itEPSS 0.22%May 3, 2026
- Low2.1A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.28%May 3, 2026
- Low2.1A vulnerability was found in Open5GS up to 2.7.7.Check if you run itEPSS 0.41%May 3, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.28%May 3, 2026
- Low2.1A flaw has been found in JD Cloud JDCOS 4.5.1.r4518.Check if you run itEPSS 1.91%May 3, 2026
Sort