Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 2.12%Mar 29, 2026
- Critical9.6Hackage CSRF vulnerabilityCheck if you run itEPSS 0.18%Mar 28, 2026
- Low2.1A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2.Check if you run itEPSS 0.49%Mar 28, 2026
- Medium6.5The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin…Check if you run itEPSS 0.22%Mar 28, 2026
- Medium5.4The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability checks, allowing any logged-in user, like subscr…Check if you run itEPSS 0.30%Mar 28, 2026
- Medium5.1A vulnerability was detected in QDOCS Smart School Management System up to 7.2.Check if you run itEPSS 0.32%Mar 27, 2026
- High8.0The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2.Check if you run itEPSS 0.42%Mar 27, 2026
- High7.2Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.56%Mar 27, 2026
- High7.3Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Check if you run itEPSS 0.57%Mar 27, 2026
- Medium4.9Fleet is open source device management software.Check if you run itEPSS 0.30%Mar 27, 2026
- High8.9Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 1.77%Mar 27, 2026
- Medium6.3Fleet is open source device management software.Check if you run itEPSS 0.44%Mar 27, 2026
- Low2.1A flaw has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.32%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Mar 27, 2026
- Medium6.9Appsmith versions prior to 1.98 expose sensitive instance management API endpoints without authentication.Check if you run itEPSS 0.45%Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Mar 27, 2026
- High8.3A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.Check if you run itEPSS 0.39%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.Check if you run itEPSS 0.50%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.Check if you run itEPSS 0.50%Mar 27, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel.Check if you run itEPSS 0.24%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%Mar 27, 2026
- High8.8Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.46%Mar 27, 2026
- Low1.2GlobaLeaks is free and open-source whistleblowing software.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium4.3In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure.Check if you run itEPSS 0.33%Mar 27, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before.Check if you run itEPSS 0.61%Mar 27, 2026