Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium4.3The Conditional Menus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.16%Mar 26, 2026
- Low2.0A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.38%Mar 26, 2026
- High8.1HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.Check if you run itEPSS 0.22%Mar 26, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.54%Mar 26, 2026
- High7.1School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting S…Check if you run itEPSS 0.50%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.Check if you run itEPSS 0.52%Mar 26, 2026
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.52%Mar 26, 2026
- Low2.1A vulnerability was determined in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A vulnerability was found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.Check if you run itEPSS 0.15%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.Check if you run itEPSS 0.18%Mar 26, 2026
- Medium4.8The WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stor…Check if you run itEPSS 0.19%Mar 26, 2026
- Low2.1A vulnerability has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A flaw has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium5.5A vulnerability was detected in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.41%Mar 26, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2.Check if you run itEPSS 0.43%Mar 26, 2026
- High7.2The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8.Check if you run itEPSS 0.51%Mar 26, 2026
- High8.8The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 9.1.2.Patch nowKEVEPSS 0.55%Mar 26, 2026
- Medium5.4The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3.Check if you run itEPSS 0.31%Mar 26, 2026
- High7.2The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the 'post_content' of admin_form posts in all versio…Check if you run itEPSS 1.01%Mar 26, 2026
- High8.6An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary sys…Check if you run itEPSS 0.90%Mar 26, 2026
- High8.8The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6.Check if you run itEPSS 0.51%Mar 26, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.29%Mar 26, 2026
- High7.2OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.52%Mar 26, 2026