Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A security flaw has been discovered in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- High8.8Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to elevate their privileges by assigning themselves as adminCheck if you run itEPSS 0.30%Sep 22, 2025
- Critical9.8AiKaan Cloud Controller uses a single hardcoded SSH private key and the username for remote terminal access to all managed IoT/edge devices.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium6.8The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability.Check if you run itEPSS 0.33%Sep 22, 2025
- Medium6.5The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability.Check if you run itEPSS 0.37%Sep 22, 2025
- High7.5Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get.Check if you run itEPSS 0.40%Sep 22, 2025
- High8.8In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen.Check if you run itEPSS 7.99%Sep 22, 2025
- Medium4.8A security vulnerability has been detected in htmly up to 3.1.0.Check if you run itEPSS 0.30%Sep 21, 2025
- Medium4.3The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Sep 20, 2025
- Medium6.1The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.Check if you run itEPSS 0.15%Sep 20, 2025
- Medium6.1The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2.Check if you run itEPSS 0.15%Sep 20, 2025
- Medium4.3The Internal Links Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1.Check if you run itEPSS 0.16%Sep 20, 2025
- Medium4.9The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the export_csv() function iCheck if you run itEPSS 0.30%Sep 20, 2025
- High7.2Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path configuration wh…Check if you run itEPSS 0.64%Sep 19, 2025
- High8.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (macOS/Linux client deployments) are vulnerable tCheck if you run itEPSS 0.44%Sep 19, 2025
- Critical9.3Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead codeCheck if you run itEPSS 1.41%Sep 19, 2025
- High8.6Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 (VA and SaaS deployments) contain an undocumented local userCheck if you run itEPSS 0.28%Sep 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ptp_ts_irq The E810 device has support for a "low latency" firmware inCheck if you run itEPSS 0.17%Sep 19, 2025
- High8.1The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' fCheck if you run itEPSS 0.37%Sep 19, 2025
- Critical9.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.42%Sep 19, 2025
- Medium6.5Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation.Check if you run itEPSS 0.24%Sep 19, 2025
- Critical9.3Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means.Check if you run itEPSS 0.44%Sep 18, 2025
- High7.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.35%Sep 18, 2025
- Medium6.9A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.48%Sep 18, 2025
Sort