Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get deleted (from the various listsCheck if you run itEPSS 0.14%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge().Check if you run itEPSS 0.18%Dec 4, 2025
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Check if you run itEPSS 0.20%Dec 4, 2025
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Check if you run itEPSS 0.20%Dec 4, 2025
- Medium5.5A flaw was found in ansible-collection-community-general.Check if you run itEPSS 0.19%Dec 4, 2025
- Medium4.8The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0.Check if you run itEPSS 0.30%Dec 4, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4.Check if you run itEPSS 0.26%Dec 4, 2025
- Medium6.1The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.8 due to insufficient input sanitizatiCheck if you run itEPSS 0.25%Dec 4, 2025
- High7.2The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync() fuCheck if you run itEPSS 0.29%Dec 4, 2025
- Medium5.3The WebP Express plugin for WordPress is vulnerable to information exposure via config files in all versions up to, and including, 0.25.9.Check if you run itEPSS 0.31%Dec 4, 2025
- Medium4.8Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling.Check if you run itEPSS 0.26%Dec 4, 2025
- Medium6.5Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint.Check if you run itEPSS 0.30%Dec 4, 2025
- Medium5.3Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism.Check if you run itEPSS 0.35%Dec 4, 2025
- High8.4A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achieve Remote Code Execution (RCE) with rootCheck if you run itEPSS 0.38%Dec 4, 2025
- Medium4.3The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files.Check if you run itEPSS 0.31%Dec 4, 2025
- High7.5A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.Check if you run itEPSS 0.63%Dec 4, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12.Check if you run itEPSS 0.22%Dec 4, 2025
- Critical9.1alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.Check if you run itEPSS 0.95%Dec 4, 2025
- High7.6An issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject arbitrary keystrokes via a spoofed BluetCheck if you run itEPSS 0.29%Dec 4, 2025
- Medium4.3open-webui v0.6.33 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.28%Dec 4, 2025
- High7.5Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentiaCheck if you run itEPSS 0.26%Dec 4, 2025
- High7.5A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows atCheck if you run itEPSS 0.28%Dec 4, 2025
- Critical9.8Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator passwordCheck if you run itEPSS 0.57%Dec 4, 2025
- Medium5.7Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator passworCheck if you run itEPSS 0.31%Dec 4, 2025
- Medium6.5An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial rCheck if you run itEPSS 0.35%Dec 4, 2025
Sort