Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.55%Mar 21, 2026
- Low2.7The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the AJAX action.Check if you run itEPSS 0.44%Mar 21, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.77%Mar 21, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.42%Mar 21, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium5.3Avo is a framework to create admin panels for Ruby on Rails apps.Check if you run itEPSS 0.35%Mar 20, 2026
- High8.1Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.38%Mar 20, 2026
- Medium5.7A command injection vulnerability has been reported to affect QuNetSwitch.Check if you run itEPSS 0.47%Mar 20, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.Check if you run itEPSS 0.18%Mar 20, 2026
- High7.3An SQL injection vulnerability has been reported to affect QHora.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium5.6An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora.Check if you run itEPSS 0.19%Mar 20, 2026
- High7.4A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.82%Mar 20, 2026
- Critical9.4OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated con…Check if you run itEPSS 0.57%Mar 20, 2026
- Low2.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.33%Mar 20, 2026
- High8.6WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.69%Mar 20, 2026
- High8.1Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Check if you run itEPSS 0.38%Mar 20, 2026
- Medium5.3The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17.Check if you run itEPSS 0.55%Mar 20, 2026
- High7.5FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.26%Mar 20, 2026
- High8.8FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.74%Mar 20, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.71%Mar 20, 2026
- Medium4.4The CM Custom Reports – Flexible reporting to track what matters most plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versi…Check if you run itEPSS 0.25%Mar 20, 2026
- Medium6.5The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of…Check if you run itEPSS 0.52%Mar 20, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.38%Mar 20, 2026
- Low2.0A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0.Check if you run itEPSS 0.53%Mar 20, 2026
- Medium5.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.31%Mar 20, 2026