Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events.Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.9WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowe…Check if you run itEPSS 0.13%Oct 15, 2026
- UnknownAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.Check if you run itEPSS 0.76%Oct 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- High8.5LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityPatch nowKEVEPSS 0.81%Jun 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt to create se…Check if you run itEPSS 0.16%May 8, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- Low2.1A vulnerability has been found in Lagom WHMCS Template up to 2.4.2.Check if you run itEPSS 0.47%Apr 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WHMCSdes Phox Hosting phox-host allows Reflected XSS.This issue a…Check if you run itEPSS 0.18%Mar 25, 2026
- Low2.0A vulnerability was found in Lagom WHMCS Template up to 2.3.7.Check if you run itEPSS 0.40%Mar 16, 2026
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- High8.1Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal.Check if you run itEPSS 0.45%May 16, 2025
- High7.5Path Traversal vulnerability in WHMPress WHMpress allows Relative Path Traversal.Check if you run itEPSS 0.47%May 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element aCheck if you run itEPSS 0.22%May 7, 2025
- Medium5.3GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.Check if you run itEPSS 0.45%Apr 20, 2025
- Medium5.4GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metachaCheck if you run itEPSS 0.59%Apr 20, 2025
- Medium5.8GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the privatCheck if you run itEPSS 1.38%Apr 20, 2025
- UnknownWordPress WHMpress Plugin Reflected XSS VulnerabilityPatch nowKEVEPSS 0.27%Aug 14, 2024
18 records · page 1 of 1
PreviousNext