Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz.Check if you run itEPSS 1.74%Nov 12, 2025
- High7.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.27%Nov 12, 2025
- Medium5.3Apache OpenOffice documents can contain links.Check if you run itEPSS 0.49%Nov 12, 2025
- Medium4.3An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas.Check if you run itEPSS 0.55%Nov 12, 2025
- High7.5Apache OpenOffice documents can contain links.Check if you run itEPSS 1.45%Nov 12, 2025
- High7.5Apache OpenOffice documents can contain links to other files.Check if you run itEPSS 1.25%Nov 12, 2025
- High8.1Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources".Check if you run itEPSS 1.26%Nov 12, 2025
- Medium6.5Apache OpenOffice documents can contain links.Check if you run itEPSS 0.59%Nov 12, 2025
- High7.5Apache OpenOffice documents can contain links.Check if you run itEPSS 0.90%Nov 12, 2025
- High7.5The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaulted_nonceCheck if you run itEPSS 0.47%Nov 12, 2025
- Medium4.3The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on tCheck if you run itEPSS 0.28%Nov 12, 2025
- Medium5.1The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript coCheck if you run itEPSS 0.21%Nov 12, 2025
- Critical9.3The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access theCheck if you run itEPSS 0.62%Nov 12, 2025
- Critical9.3The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens anCheck if you run itEPSS 0.69%Nov 12, 2025
- Medium4.8The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that aCheck if you run itEPSS 0.23%Nov 12, 2025
- Medium4.3The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on thCheck if you run itEPSS 0.19%Nov 12, 2025
- Medium4.4The MembershipWorks – Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.14Check if you run itEPSS 0.25%Nov 12, 2025
- High7.5The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookiCheck if you run itEPSS 0.28%Nov 12, 2025
- Medium4.3The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1.Check if you run itEPSS 0.17%Nov 12, 2025
- Medium4.3The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, andCheck if you run itEPSS 0.24%Nov 12, 2025
- Medium4.3The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.22 via the 'awwlm_rCheck if you run itEPSS 0.20%Nov 12, 2025
- Medium5.2A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed trafCheck if you run itEPSS 0.13%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arCheck if you run itEPSS 0.15%Nov 12, 2025
- Medium4.0An out-of-bounds access issue was addressed with improved bounds checking.Check if you run itEPSS 0.16%Nov 12, 2025
- High7.5Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters.Check if you run itEPSS 0.29%Nov 12, 2025
Sort