Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck if you run itEPSS 0.15%Jun 17, 2025
- Medium4.8Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface.Check this weekEPSS 32.00%Jun 17, 2025
- Medium5.3A vulnerability was found in Projectworlds Life Insurance Management System 1.0.Check this weekEPSS 47.00%Jun 16, 2025
- Medium5.3A vulnerability was found in Projectworlds Life Insurance Management System 1.0.Check this weekEPSS 47.00%Jun 16, 2025
- High8.7SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saviCheck this weekEPSS 64.00%Jun 16, 2025
- Medium6.4The Click to Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-no_number’ parameter in all versions up to, and including, 4.22 to insufficient inCheck if you run itEPSS 0.27%Jun 14, 2025
- Medium4.3The Yougler Blogger Profile Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, v1.01.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium4.3The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium6.1The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.Check if you run itEPSS 0.13%Jun 14, 2025
- Medium6.1The Easy Flashcards plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.Check if you run itEPSS 0.22%Jun 14, 2025
- Medium6.1The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.13%Jun 14, 2025
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.27.21.Check if you run itEPSS 0.17%Jun 14, 2025
- Medium4.3The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.14%Jun 13, 2025
- Medium5.3The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1.Check if you run itEPSS 0.14%Jun 13, 2025
- Medium6.1The Link Shield plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.4.Check if you run itEPSS 0.13%Jun 13, 2025
- High8.4A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root uCheck if you run itEPSS 0.62%Jun 12, 2025
- Medium4.2The application fails to implement several security headers.Check if you run itEPSS 0.31%Jun 12, 2025
- Medium4.3The web application is vulnerable to clickjacking attacks.Check if you run itEPSS 0.33%Jun 12, 2025
- Medium6.9Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125.Check if you run itEPSS 0.13%Jun 12, 2025
- Medium6.7A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.Check if you run itEPSS 0.31%Jun 11, 2025
- High7.3ClipShare is a lightweight and cross-platform tool for clipboard sharing.Check if you run itEPSS 0.17%Jun 11, 2025
- High7.8The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which isCheck if you run itEPSS 0.14%Jun 10, 2025
- Medium5.5The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permCheck if you run itEPSS 0.21%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- Medium4.1A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internaCheck if you run itEPSS 0.34%Jun 10, 2025