Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWPvivid migration\,_backup\,_staging Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 35.12%Feb 11, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.25%Feb 3, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.66%Feb 2, 2026
- Unknownarticatech artica_proxy Relative Path TraversalPatch nowKEVEPSS 44.58%Feb 2, 2026
- Unknowngreatjoomla scriptegrator_plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.24%Feb 2, 2026
- Unknownparallels h-sphere Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.30%Jan 29, 2026
- Unknownphpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.32%Jan 25, 2026
- Unknownphpmyfaq phpmyfaq Exposure of Sensitive Information Through Data QueriesPatch nowKEVEPSS 2.14%Jan 18, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.05%Jan 7, 2026
- Low2.0A vulnerability was determined in PluXml up to 5.8.22.Check if you run itEPSS 0.47%Jan 2, 2026
- Medium5.3A vulnerability was detected in PHPEMS up to 11.0.Check if you run itEPSS 0.25%Jan 1, 2026
- Medium6.5SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter.Check if you run itEPSS 0.28%Dec 26, 2025
- Unknownpercha com_perchagallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.78%Dec 26, 2025
- Unknowntychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.71%Dec 24, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- Medium5.5A vulnerability has been found in SeaCMS up to 13.3.Check if you run itEPSS 0.45%Dec 21, 2025
- Critical9.1In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows…Check if you run itEPSS 0.29%Dec 15, 2025
- Low2.0A security vulnerability has been detected in DedeBIZ up to 6.5.9.Check if you run itEPSS 7.28%Dec 14, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium6.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.Check if you run itEPSS 0.27%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a…Check if you run itEPSS 0.54%Dec 11, 2025
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute a…Check if you run itEPSS 0.57%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator v…Check if you run itEPSS 0.21%Dec 11, 2025
- High8.8An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading…Check if you run itEPSS 0.53%Dec 11, 2025