Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions.Check this weekEPSS 26.00%Jun 27, 2025
- High7.2The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3.5.19 due to insufficient inputCheck this weekEPSS 31.00%Jun 26, 2025
- Low2.4Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs.Check this weekEPSS 18.00%Jun 26, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 0.55%Jun 26, 2025
- Medium5.3A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884.Check if you run itEPSS 2.44%Jun 25, 2025
- Medium4.5OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.Check this weekEPSS 33.00%Jun 25, 2025
- High7.1Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.Check if you run itEPSS 0.46%Jun 25, 2025
- Medium4.3The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user intoCheck this weekEPSS 28.00%Jun 24, 2025
- Medium6.3Gogs is an open source self-hosted Git service.Check this weekEPSS 39.00%Jun 24, 2025
- High7.3Notepad++ is a free and open-source source code editor.Check this weekEPSS 66.00%Jun 23, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 1.00%Jun 23, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0.Check this weekEPSS 48.00%Jun 21, 2025
- Critical9.3A Cross-Site Scripting (XSS) vulnerability has been identified in Psono-Client’s handling of vault entries of type website_password and bookmark, as used in Bitdefender SecurePass.Check if you run itEPSS 0.57%Jun 21, 2025
- Critical9.3rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161.Check this weekEPSS 17.00%Jun 21, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in indgeek ClipLink cliplink allows Cross Site Request Forgery.This issue affects ClipLink: from n/a through <= 1.1.Check this weekEPSS 15.00%Jun 20, 2025
- Medium5.4Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: fromCheck this weekEPSS 32.00%Jun 20, 2025
- Medium4.9Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificatesOpen the advisoryJun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Fix out-of-bounds access Clip memory range to screen-buffer size to avoid out-of-bounds access inCheck if you run itEPSS 0.21%Jun 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn The user of k3_u…Check if you run itEPSS 0.16%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the readdir concurrency processCheck if you run itEPSS 0.21%Jun 18, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timur Kamaev Kama Click Counter kama-clic-counter allows Stored XSS.This issueCheck this weekEPSS 19.00%Jun 17, 2025
- High7.3A flaw was found in the X Record extension.Check this weekEPSS 33.00%Jun 17, 2025
- Medium5.5A flaw was found in the X server's request handling.Check this weekEPSS 24.00%Jun 17, 2025
- Medium6.1A flaw was found in the XFIXES extension.Check this weekEPSS 43.00%Jun 17, 2025
- Medium6.1A flaw was found in the X Rendering extension's handling of animated cursors.Check this weekEPSS 34.00%Jun 17, 2025