Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Medium5.9Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator prCheck if you run itEPSS 0.27%Aug 29, 2025
- Medium4.3The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Aug 29, 2025
- High7.1Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability.Check if you run itEPSS 0.30%Aug 29, 2025
- Critical9.3Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embeddedCheck if you run itEPSS 0.53%Aug 29, 2025
- High8.6There is an Access Control Vulnerability in some HikCentral Professional versions.Check if you run itEPSS 0.46%Aug 29, 2025
- Medium5.5A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Medium5.5A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 29, 2025
- Medium4.8A security vulnerability has been detected in ZrLog up to 3.1.5.Check if you run itEPSS 0.28%Aug 28, 2025
- Low2.0A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0.Check if you run itEPSS 0.21%Aug 28, 2025
- Low2.0A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688.Check if you run itEPSS 0.22%Aug 28, 2025
- Critical9.1Valtimo is a platform for Business Process Automation.Check if you run itEPSS 0.40%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in shmish111 WP Admin Theme wp-admin-theme allows Stored XSS.This issue affects WP Admin Theme: from n/a through <= 1.0.Check if you run itEPSS 0.13%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality.Check if you run itEPSS 0.25%Aug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium6.9QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality.Check if you run itEPSS 0.15%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality.Check if you run itEPSS 0.25%Aug 28, 2025
- Critical9.8The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentral_admin_login_2fa_verify() function in veCheck if you run itEPSS 0.71%Aug 28, 2025
- Medium6.5The Simple Download Monitor plugin for WordPress is vulnerable to time-based SQL Injection via the order parameter in all versions up to, and including, 3.9.33 due to insufficientCheck if you run itEPSS 0.32%Aug 28, 2025
- Medium6.4The Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 10.14.1 due to insufficient input sanitizaCheck if you run itEPSS 0.20%Aug 28, 2025
- High8.8The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6.Check if you run itEPSS 0.25%Aug 28, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.02%Aug 28, 2025
- High7.7An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows unauthenticated attackers to gain unauthorized access to protected functionality or user accCheck if you run itEPSS 0.37%Aug 27, 2025
- Medium6.0A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any fileCheck if you run itEPSS 0.18%Aug 27, 2025
Sort