Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.54%Apr 25, 2025
- Medium6.1The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.dec.2012.Check if you run itEPSS 0.31%Apr 25, 2025
- Medium6.1The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due toCheck if you run itEPSS 0.33%Apr 25, 2025
- Medium6.1The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.25%Apr 25, 2025
- Medium6.1The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.31%Apr 25, 2025
- High7.1NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.Check if you run itEPSS 0.22%Apr 25, 2025
- Medium4.6Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.Check if you run itEPSS 0.23%Apr 24, 2025
- Medium6.3Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.Check if you run itEPSS 0.30%Apr 24, 2025
- Low3.7Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment.Check if you run itEPSS 0.24%Apr 24, 2025
- Medium6.5Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.Check if you run itEPSS 0.26%Apr 24, 2025
- Medium6.8A flaw was found in libsoup.Check if you run itEPSS 0.57%Apr 24, 2025
- Medium5.3BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability.Check if you run itEPSS 0.45%Apr 23, 2025
- High7.1PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.47%Apr 23, 2025
- High7.5Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 0.86%Apr 23, 2025
- Medium5.8A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9.Check if you run itEPSS 1.21%Apr 23, 2025
- High8.6A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006.Check if you run itEPSS 0.52%Apr 22, 2025
- High8.1The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.Check if you run itEPSS 0.14%Apr 21, 2025
- High7.5The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.24%Apr 19, 2025
- Medium4.3The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,Check if you run itEPSS 0.15%Apr 19, 2025
- High8.2In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product.Check if you run itEPSS 0.16%Apr 19, 2025
- Medium5.3NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.48%Apr 18, 2025
- Medium6.5Element X Android is a Matrix Android Client provided by element.io.Check if you run itEPSS 0.37%Apr 18, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client.Check if you run itEPSS 2.09%Apr 18, 2025
- Medium6.1The Coupon Affiliates – Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the commission_summary parameter in all versions uCheck if you run itEPSS 0.42%Apr 18, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through <= 1.5.3.Check if you run itEPSS 0.63%Apr 17, 2025