Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A flaw has been found in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Medium5.1A vulnerability was detected in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 2, 2025
- Low2.3/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.30%Nov 1, 2025
- Low2.3/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.30%Nov 1, 2025
- Critical10.0Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.34%Nov 1, 2025
- Critical10.0Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.37%Nov 1, 2025
- Critical10.0Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.43%Nov 1, 2025
- High8.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check.Check if you run itEPSS 0.31%Nov 1, 2025
- Medium6.4The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 4.23.0 due to insufficientCheck if you run itEPSS 0.19%Nov 1, 2025
- High8.8The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the pagebuilder widget.Check if you run itEPSS 0.58%Nov 1, 2025
- Medium4.9The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.14.16.Check if you run itEPSS 0.47%Nov 1, 2025
- High8.8The RESTful Content Syndication plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ingest_image() function in versions 1.1.0 toCheck if you run itEPSS 0.54%Nov 1, 2025
- High8.8The WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin for WordPress is vulnerable to arbitrary file uploads when importing recipes via CSV in all vCheck if you run itEPSS 0.54%Nov 1, 2025
- Critical9.8The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation iCheck if you run itEPSS 1.07%Nov 1, 2025
- High7.3The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function.Check if you run itEPSS 0.47%Nov 1, 2025
- High8.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and excluding, 6.1.Check if you run itEPSS 0.30%Nov 1, 2025
- Medium6.5The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including, 2.4.9 due to insufficient escaping on the uCheck if you run itEPSS 0.28%Nov 1, 2025
- Medium6.4The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saswp_tiny_multiple_faq' shortcode in all versions upCheck if you run itEPSS 0.23%Nov 1, 2025
- Medium4.3The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the /wp-json/folderly/v1/config/clear-all-data RESTCheck if you run itEPSS 0.19%Nov 1, 2025
- Medium4.3The WP Discourse plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5.9.Check if you run itEPSS 0.27%Nov 1, 2025
- Medium6.4The Employee Spotlight – Team Member Showcase & Meet the Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social URLs in all versions up to, and inCheck if you run itEPSS 0.19%Nov 1, 2025
- Medium4.3The Qi Blocks plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.3.Check if you run itEPSS 0.23%Nov 1, 2025
- High8.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.38%Nov 1, 2025
- Medium4.4The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, aCheck if you run itEPSS 0.24%Nov 1, 2025
- Medium6.4The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.6.1 due to insufficient input sanitiCheck if you run itEPSS 0.24%Nov 1, 2025
Sort