Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A flaw has been found in code-projects Question Paper Generator up to 1.0.Check if you run itEPSS 0.35%Dec 7, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.28%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.23%Dec 7, 2025
- Medium5.5A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2.Check if you run itEPSS 0.32%Dec 7, 2025
- Medium5.5A vulnerability was detected in Chanjet CRM up to 20251121.Check if you run itEPSS 0.30%Dec 7, 2025
- Low2.0A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0.Check if you run itEPSS 0.34%Dec 5, 2025
- Medium6.1The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to i…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2…Check if you run itEPSS 0.26%Dec 5, 2025
- Unknownsir gnuboard URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.53%Dec 5, 2025
- High8.9LaraDashboard is an all-In-one solution to start a Laravel Application.Open the advisoryDec 4, 2025
- Critical9.3UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP…Open the advisoryDec 4, 2025
- Low1.9A vulnerability was identified in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.28%Dec 4, 2025
- Low2.0A vulnerability was determined in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- Low2.0A vulnerability was found in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- High7.2Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online.Open the advisoryDec 3, 2025
- High7.2The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_unzip_file' function in ve…Check if you run itEPSS 1.03%Dec 3, 2025
- Medium6.9Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system.Open the advisoryDec 2, 2025
- Medium5.1Directory traversal vulnerability in SOLIDserver IPAM v8.2.3.Check if you run itEPSS 0.54%Dec 2, 2025
- High8.1The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0.Check if you run itEPSS 0.97%Dec 2, 2025
- High8.8The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles() function…Check if you run itEPSS 0.55%Dec 2, 2025
- Low1.9A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01.Check if you run itEPSS 0.25%Nov 30, 2025
- Low2.1A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e.Check if you run itEPSS 0.32%Nov 30, 2025
- Medium5.5A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97.Check if you run itEPSS 0.46%Nov 30, 2025
- Low2.1A vulnerability was found in ZenTao up to 21.7.6-8564.Check if you run itEPSS 0.29%Nov 30, 2025
- Medium5.5A vulnerability has been found in Chanjet CRM up to 20251106.Check if you run itEPSS 0.40%Nov 30, 2025