Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() function i…Check if you run itEPSS 0.36%Mar 23, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized deletion of quiz question answers due to a missing capability check in the del…Check if you run itEPSS 0.35%Mar 23, 2026
- Medium6.5The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5.Check if you run itEPSS 0.33%Mar 23, 2026
- Medium6.8Connect-CMS is a content management system.Check if you run itEPSS 0.48%Mar 23, 2026
- Critical9.3Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.Check if you run itEPSS 0.41%Mar 23, 2026
- Medium5.4A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2.Check if you run itEPSS 0.20%Mar 23, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.51%Mar 23, 2026
- Critical9.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.60%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.95%Mar 23, 2026
- High7.1A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a pro…Check if you run itEPSS 0.31%Mar 23, 2026
- High8.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.45%Mar 23, 2026
- High7.5A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS) via se…Check if you run itEPSS 1.71%Mar 23, 2026
- High7.5A NULL pointer dereference in the daap_reply_playlists function (src/httpd_daap.c) of owntone-server commit 3d1652d allows attackers to cause a Denial of Service (DoS)…Check if you run itEPSS 0.63%Mar 23, 2026
- High8.8A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.Check if you run itEPSS 2.60%Mar 23, 2026
- High7.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.44%Mar 23, 2026
- Low1.3A security flaw has been discovered in kalcaddle kodbox 1.64.Check if you run itEPSS 0.21%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.76%Mar 23, 2026
- Medium6.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.36%Mar 23, 2026
- Low2.1A vulnerability was identified in kalcaddle kodbox 1.64.Check if you run itEPSS 0.36%Mar 23, 2026
- Medium6.1Summary When trustProxy is configured with a restrictive trust function (e.g., a specific IP like trustProxy: '10.0.0.1', a subnet, a hop count, or a custom function),…Check if you run itEPSS 0.18%Mar 23, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.55%Mar 23, 2026
- Critical9.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.56%Mar 23, 2026
- High7.2Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other…Check if you run itEPSS 0.18%Mar 23, 2026
- High8.5Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service.Check if you run itEPSS 0.71%Mar 23, 2026
- Low2.1A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.38%Mar 23, 2026