Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account detai…Check if you run itEPSS 0.15%May 10, 2026
- Critical9.3WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious…Check if you run itEPSS 0.40%May 10, 2026
- High8.7Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system command…Check if you run itEPSS 0.64%May 10, 2026
- High8.7ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP…Check if you run itEPSS 0.57%May 10, 2026
- Critical9.3OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disg…Check if you run itEPSS 0.66%May 10, 2026
- High8.7Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized…Check if you run itEPSS 0.93%May 10, 2026
- Critical9.3WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to…Check if you run itEPSS 0.59%May 10, 2026
- Critical9.3WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitting craf…Check if you run itEPSS 0.40%May 10, 2026
- High8.8Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbit…Check if you run itEPSS 0.31%May 10, 2026
- Medium5.1WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by explo…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter.Check if you run itEPSS 0.28%May 10, 2026
- Medium6.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the…Check if you run itEPSS 0.53%May 10, 2026
- Critical9.5In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores point…Check if you run itEPSS 1.29%May 10, 2026
- Medium5.5A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03.Check if you run itEPSS 0.77%May 10, 2026
- Low2.1A security vulnerability has been detected in osTicket up to 1.18.3.Check if you run itEPSS 0.23%May 9, 2026
- High8.8AzuraCast is a self-hosted, all-in-one web radio management suite.Check if you run itEPSS 1.03%May 9, 2026
- Low2.1A weakness has been identified in Akaunting 3.1.21.Check if you run itEPSS 0.35%May 9, 2026
- Medium5.3The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure…Check if you run itEPSS 0.56%May 9, 2026
- Medium5.3Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk.Check if you run itEPSS 0.08%May 9, 2026
- High8.2Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.74%May 9, 2026
- Critical9.1Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages.Check if you run itEPSS 0.34%May 9, 2026
- Low2.3FastGPT is an AI Agent building platform.Check if you run itEPSS 0.39%May 8, 2026
- Critical9.0Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.44%May 8, 2026
- High8.6pygeoapi is a Python server implementation of the OGC API suite of standards.Check if you run itEPSS 0.56%May 8, 2026
- High7.5pygeoapi is a Python server implementation of the OGC API suite of standards.Check if you run itEPSS 0.61%May 8, 2026