Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7A flaw was found in Keycloak Admin REST (Representational State Transfer) API.Check if you run itEPSS 0.35%Dec 10, 2025
- Critical9.3Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UICheck if you run itEPSS 0.18%Dec 10, 2025
- Medium4.9The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.52%Dec 10, 2025
- Critical9.8The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2.Check if you run itEPSS 0.48%Dec 10, 2025
- Critical9.3Emby Server is a user-installable home media server.Check if you run itEPSS 0.59%Dec 9, 2025
- Low2.7An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions,…Check if you run itEPSS 0.21%Dec 9, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.19%Dec 9, 2025
- Critical9.8SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive informa…Check if you run itEPSS 0.41%Dec 9, 2025
- Medium4.3SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, includi…Open the advisoryDec 9, 2025
- High8.1Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out admin…Check if you run itEPSS 0.54%Dec 9, 2025
- Medium6.9Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.44%Dec 9, 2025
- High8.8Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session.Open the advisoryDec 8, 2025
- Critical9.1Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.Check if you run itEPSS 0.73%Dec 8, 2025
- Low3.3phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality.Check if you run itEPSS 0.20%Dec 8, 2025
- High8.1In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Factor Authentication (2FA) verification.Check if you run itEPSS 0.41%Dec 8, 2025
- Low1.9A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
- Medium5.5A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.Check if you run itEPSS 0.30%Dec 8, 2025
- Medium5.5A vulnerability was determined in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.38%Dec 8, 2025
- Low2.1A flaw has been found in Verysync 微力同步 up to 2.21.3.Check if you run itEPSS 0.36%Dec 7, 2025
- Medium5.5A vulnerability was detected in Verysync 微力同步 2.21.3.Check if you run itEPSS 0.46%Dec 7, 2025
- High7.2The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input…Check if you run itEPSS 0.40%Dec 6, 2025
- Low2.7Nextcloud Desktop is the desktop sync client for Nextcloud.Check if you run itEPSS 0.30%Dec 5, 2025
- Medium4.3Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team.Check if you run itEPSS 0.28%Dec 5, 2025
- Medium4.3Nextcloud Server is a self hosted personal cloud system.Open the advisoryDec 5, 2025
- Low2.1A vulnerability was identified in Himool ERP up to 2.2.Check if you run itEPSS 0.24%Dec 5, 2025