Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A flaw was found in glib.Check if you run itEPSS 0.58%Dec 11, 2025
- High8.5squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticatedCheck if you run itEPSS 0.30%Dec 11, 2025
- High7.7GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authentCheck if you run itEPSS 0.52%Dec 11, 2025
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 13.2 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated userCheck if you run itEPSS 0.24%Dec 11, 2025
- Medium6.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated uCheck if you run itEPSS 0.39%Dec 11, 2025
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an unauthenticateCheck if you run itEPSS 0.86%Dec 11, 2025
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain conditions could haveCheck if you run itEPSS 0.42%Dec 11, 2025
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated uCheck if you run itEPSS 0.30%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 6.3 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated usCheck if you run itEPSS 0.31%Dec 11, 2025
- Medium6.4The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 13.2.1 due to insuCheck if you run itEPSS 0.23%Dec 11, 2025
- Medium6.5The List category posts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘starting_with’ parameter of the catlist shortcode in all versions up to, and includiCheck if you run itEPSS 0.32%Dec 11, 2025
- Low2.3A weakness has been identified in EFM ipTIME A3004T 14.19.0.Check if you run itEPSS 1.81%Dec 11, 2025
- Critical9.8The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16.Check if you run itEPSS 0.35%Dec 11, 2025
- Medium5.8The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versCheck if you run itEPSS 0.26%Dec 11, 2025
- Medium6.5Pyrofork is a modern, asynchronous MTProto API framework.Check if you run itEPSS 0.32%Dec 11, 2025
- High8.5Ibexa is a composable end-to-end DXP (Digital Experience Platform).Check if you run itEPSS 0.14%Dec 11, 2025
- Medium5.3ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.22%Dec 11, 2025
- High8.7Form.io is a combined Form and API platform for Serverless applications.Check if you run itEPSS 0.31%Dec 11, 2025
- Medium5.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.26%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- High8.8An issue was discovered in cPanel 110 through 132.Check if you run itEPSS 0.83%Dec 11, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file toCheck if you run itEPSS 0.54%Dec 11, 2025
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary codeCheck if you run itEPSS 0.57%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interCheck if you run itEPSS 0.21%Dec 11, 2025
Sort