Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.35%Mar 26, 2026
- Low2.1A vulnerability was identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.27%Mar 26, 2026
- Low2.1A vulnerability was determined in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.27%Mar 26, 2026
- Low2.1A vulnerability was found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.34%Mar 26, 2026
- High8.8Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet.Check if you run itEPSS 3.43%Mar 26, 2026
- High7.5On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID.Check if you run itEPSS 0.37%Mar 26, 2026
- High7.5When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in.Check if you run itEPSS 1.14%Mar 26, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.Check if you run itEPSS 0.14%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.Check if you run itEPSS 0.17%Mar 26, 2026
- Medium5.3The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing dataPatch nowKEVEPSS 0.68%Mar 26, 2026
- Medium4.8The WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stor…Check if you run itEPSS 0.19%Mar 26, 2026
- Medium6.5Responsive Plus Ajax Action Arbitrary Shortcode Execution VulnerabilityPatch nowKEVEPSS 0.33%Mar 26, 2026
- Medium6.8The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a pat…Check if you run itEPSS 0.44%Mar 26, 2026
- Low2.1A vulnerability has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.27%Mar 26, 2026
- Low2.1A flaw has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium4.3The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exposure in all versions up to, and including, 3.35.7.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.5A vulnerability was detected in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium5.5A weakness has been identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.26%Mar 26, 2026
- High7.4A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938.Check this weekEPSS 10.66%Mar 26, 2026
- Medium6.4The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the and shortcodes in all versions up to, an…Check if you run itEPSS 0.24%Mar 26, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.2The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium5.3The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21.Check if you run itEPSS 0.48%Mar 26, 2026
- Medium6.4The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc_menu' shortcode in all versions up to, and including, 2.3.Check if you run itEPSS 0.24%Mar 26, 2026
Sort