Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14.Check if you run itEPSS 0.22%Dec 6, 2025
- High7.2The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input sanitizationCheck if you run itEPSS 0.40%Dec 6, 2025
- Medium6.1The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient inCheck if you run itEPSS 0.21%Dec 6, 2025
- Medium4.3HedgeDoc is an open source, real-time, collaborative, markdown notes application.Check if you run itEPSS 0.10%Dec 5, 2025
- Medium5.1A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0.Check if you run itEPSS 0.26%Dec 5, 2025
- Low2.3A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android.Check if you run itEPSS 0.64%Dec 5, 2025
- High8.7A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050.Check this weekEPSS 10.46%Dec 5, 2025
- High8.7A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050.Check this weekEPSS 12.20%Dec 5, 2025
- High8.7A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050.Check this weekEPSS 12.09%Dec 5, 2025
- High8.7A vulnerability exists in Google Apigee's JavaCallout policy https://docs.apigee.com/api-platform/reference/policies/java-callout-policy that allows for remote code execution.Check if you run itEPSS 0.42%Dec 5, 2025
- Medium5.3A vulnerability was determined in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06.Check if you run itEPSS 0.30%Dec 5, 2025
- Medium4.2An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Alias and a valid SSH key but limited to PaCheck if you run itEPSS 0.17%Dec 5, 2025
- High7.0Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.Check if you run itEPSS 0.23%Dec 5, 2025
- High7.5BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services.Check if you run itEPSS 0.41%Dec 5, 2025
- High7.4Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.17%Dec 5, 2025
- Low1.3Frappe Learning Management System (LMS) is a learning system that helps users structure their content.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium5.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.27%Dec 5, 2025
- Critical10.0cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.34%Dec 5, 2025
- High8.2yawkat LZ4 Java provides LZ4 compression for Java.Check if you run itEPSS 0.60%Dec 5, 2025
- High8.9TUUI is a desktop MCP client designed as a tool unitary utility integration.Check if you run itEPSS 0.52%Dec 5, 2025
- Medium4.3Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud.Check if you run itEPSS 0.28%Dec 5, 2025
- Medium4.3Nextcloud talk is a video & audio conferencing app for Nextcloud.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.4Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing.Check if you run itEPSS 0.25%Dec 5, 2025
- Low2.7Nextcloud Desktop is the desktop sync client for Nextcloud.Check if you run itEPSS 0.30%Dec 5, 2025
- Medium4.3Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team.Check if you run itEPSS 0.28%Dec 5, 2025
Sort