Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnUrl' parameter within the Info Cards…Check if you run itEPSS 0.37%Mar 19, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Tripgo tripgo allows PHP Local File I…Check if you run itEPSS 0.58%Mar 19, 2026
- High8.8The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.…Check if you run itEPSS 0.47%Mar 18, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.36%Mar 18, 2026
- Low2.0A vulnerability was detected in Portabilis i-Educar 2.11.Check if you run itEPSS 0.34%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.80%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.69%Mar 18, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Food Order System 1.0.Check if you run itEPSS 0.59%Mar 17, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.63%Mar 16, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.73%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.91%Mar 16, 2026
- Medium6.9Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read th…Check if you run itEPSS 0.64%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.46%Mar 16, 2026
- Critical9.1Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.Check if you run itEPSS 0.31%Mar 16, 2026
- High7.5SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php componentCheck if you run itEPSS 0.43%Mar 16, 2026
- Low2.1A vulnerability was identified in itsourcecode College Management System 1.0.Check if you run itEPSS 0.33%Mar 16, 2026
- Low2.0A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium5.5A flaw has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.43%Mar 16, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.46%Mar 16, 2026
- Medium5.5A weakness has been identified in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.43%Mar 16, 2026
- Low1.9A security flaw has been discovered in CMS Made Simple up to 2.2.21.Check if you run itEPSS 0.36%Mar 16, 2026
- Medium5.5A vulnerability was identified in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.61%Mar 16, 2026
- Low2.0A weakness has been identified in phpipam up to 1.7.4.Check if you run itEPSS 0.34%Mar 16, 2026
- Low2.0A vulnerability was determined in UEditor up to 1.4.3.2.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium5.1A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2.Check if you run itEPSS 0.36%Mar 16, 2026