Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerabCheck if you run itEPSS 0.20%May 1, 2025
- High8.8The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4.Check if you run itEPSS 0.39%May 1, 2025
- Medium6.0The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on theCheck if you run itEPSS 0.32%May 1, 2025
- High8.2Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server byCheck if you run itEPSS 0.26%May 1, 2025
- Medium6.5Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted mCheck if you run itEPSS 0.32%May 1, 2025
- Medium6.5Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.Check if you run itEPSS 0.26%Apr 30, 2025
- Medium6.3Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.Check if you run itEPSS 0.25%Apr 30, 2025
- Medium4.6Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.Check if you run itEPSS 0.23%Apr 30, 2025
- Medium6.3A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, executeCheck if you run itEPSS 0.35%Apr 30, 2025
- High7.1A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side cCheck if you run itEPSS 0.41%Apr 30, 2025
- High7.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.60%Apr 30, 2025
- Medium4.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.54%Apr 29, 2025
- Medium4.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.54%Apr 29, 2025
- Low3.5YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.29%Apr 29, 2025
- High7.6YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.63%Apr 29, 2025
- Medium4.3A flaw was found in libsoup.Check if you run itEPSS 0.44%Apr 29, 2025
- Low3.3libsnowflakeclient is the Snowflake Connector for C/C++.Check if you run itEPSS 0.17%Apr 29, 2025
- Medium6.1Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning securitCheck if you run itEPSS 0.31%Apr 28, 2025
- Medium6.0Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.Check if you run itEPSS 0.49%Apr 28, 2025
- Low2.3DIFY is an open-source LLM app development platform.Check if you run itEPSS 0.24%Apr 28, 2025
- Medium5.7An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.Check if you run itEPSS 0.25%Apr 27, 2025
- High8.8The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget.Check if you run itEPSS 0.79%Apr 26, 2025
- Medium5.1An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.Check if you run itEPSS 0.14%Apr 25, 2025
- Medium5.1A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.Check if you run itEPSS 0.19%Apr 25, 2025
- Medium5.1An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.Check if you run itEPSS 0.15%Apr 25, 2025