Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.82%May 13, 2026
- High7.2CubeCart is an ecommerce software solution.Check if you run itEPSS 0.54%May 13, 2026
- High8.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.20%May 13, 2026
- Medium4.9CubeCart is an ecommerce software solution.Check if you run itEPSS 0.40%May 13, 2026
- Critical9.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.76%May 13, 2026
- Critical9.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.96%May 13, 2026
- Medium6.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.69%May 13, 2026
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.42%May 13, 2026
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.41%May 13, 2026
- High8.8Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.52%May 13, 2026
- Medium4.4Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.16%May 13, 2026
- High8.6Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.50%May 13, 2026
- Medium5.1Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploi…Check if you run itEPSS 0.24%May 13, 2026
- Medium5.1Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted cont…Check if you run itEPSS 0.31%May 13, 2026
- High8.8Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injec…Check if you run itEPSS 0.27%May 13, 2026
- Medium5.1Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into…Check if you run itEPSS 0.14%May 13, 2026
- Medium6.8WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the…Check if you run itEPSS 0.25%May 13, 2026
- High8.8The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.2 via the 'path' parameter of the…Check if you run itEPSS 0.82%May 13, 2026
- High8.1The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.Check if you run itEPSS 0.83%May 13, 2026
- Unknowne-office e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 32.90%May 13, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.18%May 12, 2026
- Critical9.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.36%May 12, 2026
- High8.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%May 12, 2026
- Critical9.4Scramble generates API documentation for Laravel project.Check if you run itEPSS 3.87%May 12, 2026
- High7.5PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.49%May 12, 2026