Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.42%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.31%Oct 14, 2026
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.19%Oct 14, 2026
- Low3.7FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.29%Oct 14, 2026
- High8.2FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.31%Oct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.29%Oct 14, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.1WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.34%Oct 14, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.45%Oct 14, 2026
- Medium6.5WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.43%Oct 14, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterCheck if you run itEPSS 0.49%Oct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCheck if you run itEPSS 0.47%Oct 14, 2026
- Medium6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.45%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.21%Oct 14, 2026
- High8.7ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize…Check if you run itEPSS 0.57%Oct 14, 2026
- Critical9.8e107 is a content management system (CMS).Check if you run itEPSS 0.60%Oct 14, 2026
- Critical10.0e107 is a content management system (CMS).Check if you run itEPSS 0.52%Oct 14, 2026
- High7.5FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Check if you run itEPSS 0.51%Oct 14, 2026
- Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.47%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.Check if you run itEPSS 2.12%Oct 14, 2026
- Low2.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val param…Check if you run itEPSS 0.36%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter.Check if you run itEPSS 0.39%Oct 14, 2026