Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of…Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context…Check if you run itEPSS 0.26%Mar 26, 2026
- High8.7A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0).Check if you run itEPSS 0.53%Mar 26, 2026
- High7.1A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10).Check if you run itEPSS 0.30%Mar 26, 2026
- Medium4.3The Conditional Menus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.16%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the usern…Check if you run itEPSS 0.33%Mar 26, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters.Check if you run itEPSS 0.34%Mar 26, 2026
- High7.1Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php.Check if you run itEPSS 0.25%Mar 26, 2026
- High8.8ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search…Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.55%Mar 26, 2026
- High8.8Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.34%Mar 26, 2026
- High8.8SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint.Check if you run itEPSS 0.25%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.8Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t…Check if you run itEPSS 0.48%Mar 26, 2026
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.53%Mar 26, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium5.3The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21.Check if you run itEPSS 0.66%Mar 26, 2026
- Medium6.9Squid is a caching proxy for the Web.Check if you run itEPSS 1.06%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.62%Mar 26, 2026
- High8.0Saloon is a PHP library that gives users tools to build API integrations and SDKs.Check if you run itEPSS 0.73%Mar 26, 2026
- Medium6.6Saloon is a PHP library that gives users tools to build API integrations and SDKs.Check if you run itEPSS 0.52%Mar 26, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.31%Mar 26, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.31%Mar 25, 2026