Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.Check if you run itEPSS 0.42%Dec 2, 2025
- Medium6.3A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37.Check if you run itEPSS 0.30%Dec 2, 2025
- Medium6.5An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co.Check if you run itEPSS 0.51%Dec 2, 2025
- High7.5An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Check if you run itEPSS 2.08%Dec 2, 2025
- Medium4.3An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Check if you run itEPSS 0.92%Dec 2, 2025
- Medium4.8A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android.Check if you run itEPSS 0.34%Dec 2, 2025
- Medium5.3A weakness has been identified in Yohann0617 oci-helper up to 3.2.4.Check if you run itEPSS 0.41%Dec 2, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabiCheck if you run itEPSS 0.20%Dec 2, 2025
- Medium6.9Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system.Check if you run itEPSS 0.24%Dec 2, 2025
- Medium6.4The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all versions up to, andCheck if you run itEPSS 0.23%Dec 2, 2025
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Argus Technology Inc.Check if you run itEPSS 0.31%Dec 2, 2025
- Medium6.9Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions.Check if you run itEPSS 0.21%Dec 2, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia.Check if you run itEPSS 0.19%Dec 2, 2025
- Medium5.1Directory traversal vulnerability in SOLIDserver IPAM v8.2.3.Check if you run itEPSS 0.54%Dec 2, 2025
- High8.6A Blind SQL injection vulnerability has been identified in QuickCMS.Check if you run itEPSS 0.27%Dec 2, 2025
- Medium4.9The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 1.4.6 due to insufficient escaping on theCheck if you run itEPSS 0.31%Dec 2, 2025
- Medium4.3Mattermost versions 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate the user permission when accessing the files and subscribing to the block in Boards, which allows an authCheck if you run itEPSS 0.22%Dec 2, 2025
- High7.5The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'month' parameter in all versions up to, and including, 1.4Check if you run itEPSS 0.33%Dec 2, 2025
- High8.1The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0.Check if you run itEPSS 0.97%Dec 2, 2025
- High8.8The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2.Check if you run itEPSS 0.27%Dec 2, 2025
- Medium6.3In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 byCheck if you run itEPSS 0.23%Dec 2, 2025
- High8.8Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.12%Dec 2, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4.Check if you run itEPSS 0.31%Dec 2, 2025
- Medium5.3The Zigaform plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.6.5.Check if you run itEPSS 0.30%Dec 2, 2025
- Medium4.3The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20.Check if you run itEPSS 0.15%Dec 2, 2025
Sort