Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclus…Check if you run itEPSS 0.58%Feb 20, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nenad Obradovic Extensive VC Addons for WPBake…Check if you run itEPSS 0.61%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.4LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.32%Feb 20, 2026
- High8.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.62%Feb 20, 2026
- Medium4.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.35%Feb 20, 2026
- Critical9.3LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.49%Feb 20, 2026
- Medium5.3LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.37%Feb 20, 2026
- UnknownD-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.99%Feb 20, 2026
- Unknownswim_team_project swim_team Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 32.48%Feb 12, 2026
- UnknownWPvivid migration\,_backup\,_staging Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 35.12%Feb 11, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.25%Feb 3, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.66%Feb 2, 2026
- Unknownarticatech artica_proxy Relative Path TraversalPatch nowKEVEPSS 44.58%Feb 2, 2026
- Unknowngreatjoomla scriptegrator_plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.24%Feb 2, 2026
- Unknownparallels h-sphere Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.30%Jan 29, 2026
- Unknownphpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.32%Jan 25, 2026
- Unknownphpmyfaq phpmyfaq Exposure of Sensitive Information Through Data QueriesPatch nowKEVEPSS 2.14%Jan 18, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.05%Jan 7, 2026
- Low2.0A vulnerability was determined in PluXml up to 5.8.22.Check if you run itEPSS 0.47%Jan 2, 2026
- Medium5.3A vulnerability was detected in PHPEMS up to 11.0.Check if you run itEPSS 0.25%Jan 1, 2026
- Medium6.5SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter.Check if you run itEPSS 0.28%Dec 26, 2025
- Unknownpercha com_perchagallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.78%Dec 26, 2025
- Unknowntychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.71%Dec 24, 2025