Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.68%Mar 4, 2026
- Low2.3Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads to a securityCheck if you run itEPSS 0.24%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via the QuestionCheck if you run itEPSS 0.24%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the "Legacy Form" block.Check if you run itEPSS 0.24%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block.Check if you run itEPSS 0.23%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML encoCheck if you run itEPSS 0.23%Mar 4, 2026
- High8.9Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter.Check if you run itEPSS 0.69%Mar 4, 2026
- Medium6.5The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9.16 due to inCheck if you run itEPSS 0.41%Mar 4, 2026
- Medium4.4The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.9 due to insufficient input saCheck if you run itEPSS 0.27%Mar 4, 2026
- High7.2The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.Check if you run itEPSS 0.34%Mar 4, 2026
- Medium4.4The Taskbuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.3 due to insufficient input sanitizatCheck if you run itEPSS 0.29%Mar 4, 2026
- Medium5.3The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'get_customer_list' route in all versions up to, and incCheck if you run itEPSS 0.91%Mar 4, 2026
- High7.2The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpb_user_name' and 'wpb_user_email' parameters in all versions up to, and including, 1.0.8 dCheck if you run itEPSS 0.36%Mar 4, 2026
- High7.5An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsyCheck if you run itEPSS 0.43%Mar 4, 2026
- High7.5An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e.Check if you run itEPSS 0.45%Mar 4, 2026
- Critical9.8A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram and execute arCheck if you run itEPSS 1.65%Mar 4, 2026
- Medium6.6erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json.Check if you run itEPSS 0.27%Mar 4, 2026
- High7.8Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.Check if you run itEPSS 0.24%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard.Check if you run itEPSS 0.58%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig componentCheck if you run itEPSS 0.58%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork.Check if you run itEPSS 0.60%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode.Check if you run itEPSS 0.58%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin.Check if you run itEPSS 0.58%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4.Check if you run itEPSS 0.69%Mar 4, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot.Check if you run itEPSS 3.91%Mar 4, 2026
Sort