Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.52%Mar 11, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.48%Mar 11, 2026
- Medium6.9WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.54%Mar 11, 2026
- High8.7ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the file parame…Check if you run itEPSS 0.73%Mar 11, 2026
- Critical9.3FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint.Check if you run itEPSS 0.92%Mar 11, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Mar 11, 2026
- High8.8GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.Check if you run itEPSS 0.32%Mar 11, 2026
- Low2.0A vulnerability was detected in PHPEMS 11.0.Check if you run itEPSS 0.34%Mar 11, 2026
- Medium5.5A vulnerability was determined in itsourcecode University Management System 1.0.Check if you run itEPSS 0.59%Mar 11, 2026
- High8.1The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stor…Check if you run itEPSS 0.25%Mar 11, 2026
- High8.8The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.7.1049.Patch nowKEVEPSS 0.49%Mar 11, 2026
- Medium5.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.29%Mar 10, 2026
- Medium6.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.39%Mar 10, 2026
- High8.8GetSimple CMS is a content management system.Check if you run itEPSS 0.33%Mar 10, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier.Check if you run itEPSS 0.23%Mar 10, 2026
- Critical9.3Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.Check if you run itEPSS 0.98%Mar 10, 2026
- Medium5.4web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications.Check if you run itEPSS 0.20%Mar 10, 2026
- Medium5.3Admidio is an open-source user management solution.Check if you run itEPSS 0.37%Mar 10, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.44%Mar 10, 2026
- Medium5.5A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.62%Mar 9, 2026
- High8.7A SQL injection vulnerability has been found in Eventobot.Check if you run itEPSS 0.33%Mar 9, 2026
- Low2.1A vulnerability was determined in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.48%Mar 9, 2026
- Low2.1A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026
- Low2.1A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0.Check if you run itEPSS 0.50%Mar 9, 2026
- Low2.1A vulnerability was determined in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026