Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Check if you run itEPSS 0.34%Oct 31, 2025
- Medium5.3By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehiclCheck if you run itEPSS 0.79%Oct 31, 2025
- High7.1Agno is a multi-agent framework, runtime and control plane.Check if you run itEPSS 0.16%Oct 31, 2025
- Critical9.2The equipment initially can be configured using the manufacturer's application, by Wi-Fi, by the web server or with the manufacturer’s software.Check if you run itEPSS 0.40%Oct 31, 2025
- High8.3The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol.Check if you run itEPSS 0.25%Oct 31, 2025
- Critical9.2Denial of service of the web server through specific requests to this protocolCheck if you run itEPSS 0.37%Oct 31, 2025
- Medium5.1The web application is vulnerable to a so-called ‘clickjacking’ attack.Check if you run itEPSS 0.39%Oct 31, 2025
- High7.5Integer overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application crashes through denial-of-service attacks (DoS).Check if you run itEPSS 0.49%Oct 31, 2025
- Medium5.3An XSS issue was discovered in Afterlogic Aurora webmail version 9.8.3 and below.Check if you run itEPSS 0.44%Oct 31, 2025
- Medium5.3The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the Analytify Tag HTML details.Check if you run itEPSS 0.27%Oct 31, 2025
- High7.7The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done.Check if you run itEPSS 0.35%Oct 31, 2025
- Low3.7IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.16%Oct 31, 2025
- Medium6.8Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the produCheck if you run itEPSS 0.14%Oct 31, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.Check if you run itEPSS 0.12%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This issue affects GroundCheck if you run itEPSS 0.17%Oct 31, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows BliCheck if you run itEPSS 0.28%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio Extra ohio-extra allows DOM-Based XSS.This issue affects Ohio ExCheck if you run itEPSS 0.17%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Masterstudy masterstudy allows PHP Local FilCheck if you run itEPSS 0.42%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeventhQueen Kleo kleo allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.42%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K ECheck if you run itEPSS 0.17%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Consulting Elementor Widgets consulting-elementor-widgets allowCheck if you run itEPSS 0.17%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Consulting Elementor Widgets consulting-elemCheck if you run itEPSS 0.39%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Consulting consulting allows PHP Local FileCheck if you run itEPSS 0.42%Oct 31, 2025
- Medium4.3Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce wt-smart-coupons-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security LevCheck if you run itEPSS 0.22%Oct 31, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR.Check if you run itEPSS 0.13%Oct 31, 2025
Sort