Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code Inclusion.This issue affCheck if you run itEPSS 0.37%Aug 28, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWCheck if you run itEPSS 0.30%Aug 28, 2025
- Medium6.5The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capabiliCheck if you run itEPSS 0.36%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality.Check if you run itEPSS 0.25%Aug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium6.9QuickCMS sends password and login via GET Request.Check if you run itEPSS 0.14%Aug 28, 2025
- Medium6.9QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality.Check if you run itEPSS 0.15%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality.Check if you run itEPSS 0.25%Aug 28, 2025
- High7.3Local privilege escalation due to improper soft link handling.Check if you run itEPSS 0.14%Aug 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simCheck if you run itEPSS 0.33%Aug 28, 2025
- High8.7Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary filesCheck if you run itEPSS 0.40%Aug 28, 2025
- High8.7Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).Check if you run itEPSS 0.62%Aug 28, 2025
- High7.1Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).Check if you run itEPSS 0.47%Aug 28, 2025
- Critical9.3SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.Check if you run itEPSS 0.53%Aug 28, 2025
- Critical9.3SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.Check if you run itEPSS 0.53%Aug 28, 2025
- High7.3Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a cCheck if you run itEPSS 0.12%Aug 28, 2025
- Medium6.9Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).Check if you run itEPSS 0.34%Aug 28, 2025
- High8.7Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).Check if you run itEPSS 0.18%Aug 28, 2025
- High7.8NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks.Check if you run itEPSS 0.12%Aug 28, 2025
- Medium6.4The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.148 due to insuCheck if you run itEPSS 0.24%Aug 28, 2025
- Medium4.3Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in vaCheck if you run itEPSS 0.20%Aug 28, 2025
- High7.5IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned.Check if you run itEPSS 0.34%Aug 28, 2025
- Medium6.4The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugCheck if you run itEPSS 0.24%Aug 28, 2025
- Medium6.1The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and includinCheck if you run itEPSS 0.22%Aug 28, 2025
Sort