Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in versi…Check if you run itEPSS 1.43%Mar 4, 2026
- High7.8Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.40%Mar 4, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing.Check if you run itEPSS 0.13%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sens…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails.Check if you run itEPSS 0.17%Mar 4, 2026
- Critical9.3Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis.Check this weekEPSS 11.40%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing.Check if you run itEPSS 0.14%Mar 4, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail inf…Check if you run itEPSS 0.25%Mar 4, 2026
- High8.2SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.Check if you run itEPSS 0.25%Mar 4, 2026
- Critical9.3The GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, allowing an attack…Check if you run itEPSS 0.46%Mar 4, 2026
- Critical9.5SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.Check if you run itEPSS 0.34%Mar 4, 2026
- Medium6.4The Envira Gallery for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'justified_gallery_theme' parameter in all versions up to, a…Check if you run itEPSS 0.27%Mar 4, 2026
- High8.8WARNING: Users of 6.x should upgrade to 6.2.4 or later as the fix was missed in previous 6.x releases.Check if you run itEPSS 0.87%Mar 4, 2026
- Critical9.2The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) SuperFlex Satellite Receiver insecurely st…Check if you run itEPSS 0.16%Mar 4, 2026
- High8.8International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the account.Check if you run itEPSS 0.55%Mar 4, 2026
- High7.9International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the user account.Check if you run itEPSS 0.94%Mar 4, 2026
- Critical9.2International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the (usr) account.Check if you run itEPSS 0.55%Mar 4, 2026
- High7.8International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the account.Check if you run itEPSS 0.55%Mar 4, 2026
- Critical10.0An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver.Check if you run itEPSS 1.23%Mar 4, 2026
- Critical9.3An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex Satelli…Check if you run itEPSS 2.76%Mar 4, 2026
- Critical9.3The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interf…Check if you run itEPSS 2.37%Mar 4, 2026
- Medium5.1A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satelli…Check if you run itEPSS 0.24%Mar 4, 2026
- Medium5.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Re…Check if you run itEPSS 0.24%Mar 4, 2026
- Medium5.4The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewContro…Check if you run itEPSS 0.25%Mar 4, 2026
- Medium6.5The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'order_by' attribute of the [wpmem_user_membership_posts] shortcode in all…Check if you run itEPSS 0.29%Mar 4, 2026
Sort