Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.30%Apr 27, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.66%Apr 27, 2025
- Medium5.1A vulnerability classified as problematic was found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.41%Apr 27, 2025
- Medium5.1A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.41%Apr 27, 2025
- Medium6.9A vulnerability was found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.66%Apr 27, 2025
- Medium5.3A vulnerability was found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.30%Apr 27, 2025
- Medium4.9There is an information disclosure vulnerability in the GoldenDB database product.Check if you run itEPSS 0.38%Apr 27, 2025
- Medium4.1There is an information disclosure vulnerability in the GoldenDB database product.Check if you run itEPSS 0.24%Apr 27, 2025
- Medium5.4Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI.Check if you run itEPSS 0.28%Apr 27, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.1The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' ACheck if you run itEPSS 0.88%Apr 26, 2025
- Medium4.3The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versionCheck if you run itEPSS 0.32%Apr 26, 2025
- High8.8The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all vCheck this weekEPSS 17.36%Apr 26, 2025
- High8.1The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' paCheck if you run itEPSS 0.77%Apr 26, 2025
- Medium4.9CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-oriCheck if you run itEPSS 0.25%Apr 26, 2025
- Medium4.9CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaCheck if you run itEPSS 0.26%Apr 26, 2025
- Medium6.5HCL SX v21 is affected by usage of a weak cryptographic algorithm.Check if you run itEPSS 0.22%Apr 25, 2025
- Medium5.5Halo is an open source website building tool.Check if you run itEPSS 0.81%Apr 25, 2025
- Medium5.3A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.Check if you run itEPSS 0.31%Apr 25, 2025
- High7.5A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—viCheck if you run itEPSS 0.51%Apr 25, 2025
- High8.8A flaw was found in Moodle.Check if you run itEPSS 1.04%Apr 25, 2025
- High8.8A flaw was found in Moodle.Check if you run itEPSS 0.98%Apr 25, 2025
- Medium4.3A flaw was found in Moodle.Check if you run itEPSS 0.38%Apr 25, 2025
- Low3.5A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request foCheck if you run itEPSS 0.18%Apr 25, 2025
- High7.1A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, eCheck if you run itEPSS 0.41%Apr 25, 2025
Sort