Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versiCheck if you run itEPSS 0.15%Jan 9, 2026
- Medium5.3A vulnerability was detected in RainyGao DocSys up to 2.02.36.Check if you run itEPSS 0.42%Jan 9, 2026
- Medium5.3Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.4Check if you run itEPSS 0.27%Jan 9, 2026
- Low2.7Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versiCheck if you run itEPSS 0.32%Jan 9, 2026
- Medium5.3A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1.Check if you run itEPSS 0.40%Jan 9, 2026
- Medium6.0Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versiCheck if you run itEPSS 0.56%Jan 9, 2026
- Critical9.8BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites.Check if you run itEPSS 0.71%Jan 9, 2026
- High8.6Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection.Check if you run itEPSS 1.49%Jan 9, 2026
- Medium6.9Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal.Check if you run itEPSS 0.83%Jan 9, 2026
- Critical9.3Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator.Check if you run itEPSS 0.39%Jan 9, 2026
- High8.7Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554Check if you run itEPSS 0.41%Jan 9, 2026
- Critical9.3The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker coCheck if you run itEPSS 0.55%Jan 9, 2026
- High8.8This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the use of login credentials as the session ID through its web-baCheck if you run itEPSS 0.46%Jan 9, 2026
- High8.8This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with theCheck if you run itEPSS 0.38%Jan 9, 2026
- Medium6.4The Header and Footer Scripts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _inpost_head_script parameter in all versions up to, and including, 2.3.0 duCheck if you run itEPSS 0.26%Jan 9, 2026
- Medium6.4The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'the_tooltip' shortcode in all versions up to, and including, 1.0.2 due to insuffCheck if you run itEPSS 0.26%Jan 9, 2026
- Medium6.4The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the parameter in all versions up to, and including, 0.8.0 due to insufficient input sanitizationCheck if you run itEPSS 0.25%Jan 9, 2026
- Medium6.5The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.4.Check if you run itEPSS 0.41%Jan 9, 2026
- Medium5.3The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wp_gvccf_check_download_request' functiCheck if you run itEPSS 0.35%Jan 9, 2026
- Medium6.4The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'head_class' parameter of the 'autogen_menu' shortcode in all versions up to, andCheck if you run itEPSS 0.26%Jan 9, 2026
- Medium6.4The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' parameter of the arctext shortcode in all versions up to, and including, 0.1 dueCheck if you run itEPSS 0.25%Jan 9, 2026
- Medium6.1The Shabat Keeper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] parameter in all versions up to, and including, 0.4.4 due to insCheck if you run itEPSS 0.29%Jan 9, 2026
- Medium6.4The Woodpecker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_name' parameter of the [woodpecker-connector] shortcode in all versionsCheck if you run itEPSS 0.23%Jan 9, 2026
- Medium6.4The Debt.com Business in a Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'configuration' parameter of the lead_form shortcode in all versions up to,Check if you run itEPSS 0.22%Jan 9, 2026
- Medium6.4The PullQuote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pullquote' shortcode in all versions up to, and including, 1.0 due to insufficientCheck if you run itEPSS 0.26%Jan 9, 2026
Sort