Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File InclusionCheck if you run itEPSS 0.61%Nov 6, 2025
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/aCheck if you run itEPSS 0.49%Nov 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bingu replyMail replymail allows Stored XSS.This issue affects replyMail: fromCheck if you run itEPSS 0.24%Nov 6, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SCheck if you run itEPSS 0.33%Nov 6, 2025
- High8.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd.Check if you run itEPSS 0.27%Nov 6, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad Software Inc.Check if you run itEPSS 0.20%Nov 6, 2025
- High7.0Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM.Check if you run itEPSS 0.14%Nov 6, 2025
- Medium4.3The Strong Testimonials plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.2.16.Check if you run itEPSS 0.29%Nov 6, 2025
- Medium4.3The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafar_ajax() function inCheck if you run itEPSS 0.23%Nov 6, 2025
- Medium6.1The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsp_list_attention_search' parameter iCheck if you run itEPSS 0.27%Nov 6, 2025
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 8.6.0 via the getFullConCheck if you run itEPSS 0.21%Nov 6, 2025
- Medium5.3The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass.Check if you run itEPSS 0.32%Nov 6, 2025
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to limited file upload due to an incorrect capability check on theuploadVideo() function in aCheck if you run itEPSS 0.19%Nov 6, 2025
- Medium4.3The Easy Email Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Nov 6, 2025
- Medium4.9The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on thCheck if you run itEPSS 0.30%Nov 6, 2025
- High7.5An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFacCheck if you run itEPSS 0.51%Nov 6, 2025
- Critical9.8An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android bCheck if you run itEPSS 0.70%Nov 6, 2025
- High8.8Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authentication token for DCV-based WorkSpaceCheck if you run itEPSS 0.20%Nov 5, 2025
- Medium4.6This issue was addressed by restricting options offered on a locked device.Check if you run itEPSS 0.19%Nov 5, 2025
- High7.3Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability.Check if you run itEPSS 0.14%Nov 5, 2025
- Medium6.7Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confCheck if you run itEPSS 0.14%Nov 5, 2025
- Medium6.7Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability.Check if you run itEPSS 0.10%Nov 5, 2025
- Medium5.3Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CCheck if you run itEPSS 0.37%Nov 5, 2025
- Critical9.1Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.Check if you run itEPSS 0.33%Nov 5, 2025
- High8.4Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.Check if you run itEPSS 0.65%Nov 5, 2025
Sort