Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo BlockCheck if you run itEPSS 0.24%Dec 9, 2025
- High8.7A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service.Check if you run itEPSS 0.37%Dec 9, 2025
- High8.7A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.Check if you run itEPSS 0.43%Dec 9, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachmentCheck if you run itEPSS 0.41%Dec 9, 2025
- High7.2The Social Reviews & Recommendations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the 'trim_text' function in all versions up to, andCheck if you run itEPSS 0.37%Dec 9, 2025
- Medium5.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.32%Dec 9, 2025
- Medium6.1Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection.Check if you run itEPSS 0.16%Dec 9, 2025
- Medium5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Reflected XSS.Check if you run itEPSS 0.19%Dec 9, 2025
- High8.1Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145.Check if you run itEPSS 0.44%Dec 9, 2025
- High7.3Memory safety bugs present in Firefox 145 and Thunderbird 145.Check if you run itEPSS 0.31%Dec 9, 2025
- Medium6.5Same-origin policy bypass in the Request Handling component.Check if you run itEPSS 0.19%Dec 9, 2025
- Critical9.8JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.51%Dec 9, 2025
- High8.8Privilege escalation in the Netmonitor component.Check if you run itEPSS 0.40%Dec 9, 2025
- High8.8Privilege escalation in the Netmonitor component.Check if you run itEPSS 0.40%Dec 9, 2025
- High7.5Spoofing issue in the Downloads Panel component.Check if you run itEPSS 0.38%Dec 9, 2025
- Critical9.8Use-after-free in the Audio/Video: GMP component.Check if you run itEPSS 0.46%Dec 9, 2025
- High7.3JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.34%Dec 9, 2025
- Critical9.8JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.56%Dec 9, 2025
- High8.8Privilege escalation in the DOM: Notifications component.Check if you run itEPSS 0.41%Dec 9, 2025
- High8.0Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.Check if you run itEPSS 0.34%Dec 9, 2025
- Critical9.8Use-after-free in the WebRTC: Signaling component.Check if you run itEPSS 0.60%Dec 9, 2025
- Low2.7IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information.Check if you run itEPSS 0.29%Dec 9, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in Personal Project Panilux allows Cross Site Request Forgery.Check if you run itEPSS 0.55%Dec 9, 2025
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityPatch nowKEVEPSS 68.29%Dec 9, 2025
- Medium5.3A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).Check if you run itEPSS 0.28%Dec 9, 2025
Sort