Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files.Check if you run itEPSS 0.39%Nov 5, 2025
- Medium6.5A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files.Check if you run itEPSS 0.48%Nov 5, 2025
- Critical9.4A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain admiCheck if you run itEPSS 0.92%Nov 5, 2025
- Critical9.8A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrCheck if you run itEPSS 0.87%Nov 5, 2025
- High8.4Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.Check if you run itEPSS 1.02%Nov 5, 2025
- Critical9.1Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell.Check if you run itEPSS 0.38%Nov 5, 2025
- Critical9.1An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check this weekEPSS 19.26%Nov 5, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityPatch nowKEVEPSS 4.04%Nov 5, 2025
- High8.1The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'args[extra_template_Check if you run itEPSS 0.64%Nov 5, 2025
- Medium6.4The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all verCheck if you run itEPSS 0.23%Nov 5, 2025
- Medium4.3The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inCheck if you run itEPSS 0.26%Nov 5, 2025
- Medium5.3The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9.Check if you run itEPSS 0.27%Nov 5, 2025
- Medium5.3The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up tCheck if you run itEPSS 0.37%Nov 5, 2025
- Medium6.4The Visual Link Preview plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's visual-link-preview shortcode in versions up to, and including, 2.2.7 dueCheck if you run itEPSS 0.24%Nov 5, 2025
- Medium6.4The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8Check if you run itEPSS 0.25%Nov 5, 2025
- Critical9.5The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is notCheck if you run itEPSS 0.83%Nov 5, 2025
- High8.0A flaw was found in Red Hat Satellite (Foreman component).Check if you run itEPSS 0.73%Nov 5, 2025
- Medium5.3The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5.Check if you run itEPSS 0.31%Nov 5, 2025
- Medium4.3The KiotViet Sync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveConfig() function in all versions up to, andCheck if you run itEPSS 0.20%Nov 5, 2025
- Critical9.8The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and includiCheck if you run itEPSS 0.84%Nov 5, 2025
- Medium5.3The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the register_api_route() function in kiotvietCheck if you run itEPSS 0.27%Nov 5, 2025
- High8.6The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized access/modification/loss of data in all versions up to, and inclCheck if you run itEPSS 0.33%Nov 5, 2025
- Medium6.4The B Carousel Block – Responsive Image and Content Carousel plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.1.5.Check if you run itEPSS 0.23%Nov 5, 2025
- High7.5The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including,Check if you run itEPSS 2.49%Nov 5, 2025
- Medium4.3The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerCheck if you run itEPSS 0.25%Nov 5, 2025
Sort