Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was identified in GreenCMS up to 2.3.0603.Check this weekEPSS 35.00%Aug 25, 2025
- High8.7PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check this weekEPSS 83.00%Aug 25, 2025
- Medium5.1A vulnerability was found in HuangDou UTCMS 9.Check this weekEPSS 36.00%Aug 25, 2025
- Medium6.3A vulnerability has been found in HuangDou UTCMS 9.Check this weekEPSS 43.00%Aug 25, 2025
- Medium5.3A flaw has been found in YiFang CMS up to 2.0.5.Check this weekEPSS 33.00%Aug 25, 2025
- Medium5.3A vulnerability was detected in YiFang CMS up to 2.0.5.Check this weekEPSS 34.00%Aug 25, 2025
- High8.5phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.Check this weekEPSS 29.00%Aug 25, 2025
- Medium6.5phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter.Check this weekEPSS 27.00%Aug 25, 2025
- High8.8FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article.Check this weekEPSS 49.00%Aug 25, 2025
- Medium5.4File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller.Check this weekEPSS 21.00%Aug 25, 2025
- Critical9.8Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php componentCheck this weekEPSS 78.00%Aug 25, 2025
- High8.6Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP ObjectCheck this weekEPSS 73.00%Aug 25, 2025
- Medium6.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.Check this weekEPSS 49.00%Aug 24, 2025
- Medium5.3A weakness has been identified in givanz Vvveb up to 1.0.7.2.Check this weekEPSS 50.00%Aug 24, 2025
- Medium5.3A vulnerability was found in DCN DCME-720 9.1.5.11.Check if you run itEPSS 7.69%Aug 24, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- High8.1The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions upCheck this weekEPSS 65.00%Aug 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unpluggedCheck this weekEPSS 17.00%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recovery The existing PowerNV hotplug code did not handle surpriseCheck this weekEPSS 17.00%Aug 22, 2025
- High7.8An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalaCheck this weekEPSS 19.00%Aug 22, 2025
- Medium6.9Phproject is a high performance full-featured project management system.Check this weekEPSS 41.00%Aug 21, 2025
- Medium5.1A vulnerability was detected in SourceCodester Advanced School Management System 1.0.Check this weekEPSS 29.00%Aug 21, 2025
- Medium6.9A weakness has been identified in SourceCodester Online Bank Management System 1.0.Check this weekEPSS 44.00%Aug 21, 2025
- Critical9.8The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5.Check this weekEPSS 59.00%Aug 21, 2025
- Medium5.4MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component.Check this weekEPSS 26.00%Aug 21, 2025