Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0In Search Guard versions 3.1.1 and earlier, Field Masking (FM) rules are improperly enforced on fields of type IP (IP Address).Check if you run itEPSS 0.27%Oct 29, 2025
- High7.3Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows.Check if you run itEPSS 0.13%Oct 29, 2025
- Medium6.0In Search Guard FLX versions 3.1.1 and earlier, Field-Level Security (FLS) rules are improperly enforced on object-valued fields.Check if you run itEPSS 0.27%Oct 29, 2025
- Medium6.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.23%Oct 29, 2025
- Medium4.3A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity wCheck if you run itEPSS 0.29%Oct 29, 2025
- Medium4.3A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives administrative access or the corresponding binding, the user still rCheck if you run itEPSS 0.22%Oct 29, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible addl_desc_ptr out-of-bounds accesCheck if you run itEPSS 0.31%Oct 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card In try_to_register_card(), the return valueCheck if you run itEPSS 0.21%Oct 29, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: transport_ipc: validate payload size before reading handle handle_response() dereferences the payload asCheck if you run itEPSS 0.15%Oct 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue To prevent a potential crash in agg_dequeue (net/sched/sch_qfqCheck if you run itEPSS 0.21%Oct 29, 2025
- Medium4.3The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple funcCheck if you run itEPSS 0.27%Oct 29, 2025
- Medium4.3The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the actCheck if you run itEPSS 0.23%Oct 29, 2025
- Medium4.9The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due to insufficient escaCheck if you run itEPSS 0.30%Oct 29, 2025
- Medium4.9The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escapiCheck if you run itEPSS 0.30%Oct 29, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issCheck if you run itEPSS 0.18%Oct 29, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects PremmercCheck if you run itEPSS 0.13%Oct 29, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows StoCheck if you run itEPSS 0.18%Oct 29, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through <= 1.3.19.Check if you run itEPSS 0.13%Oct 29, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through <= 3.13.1.Check if you run itEPSS 0.13%Oct 29, 2025
- Medium5.4Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured AccessCheck if you run itEPSS 0.22%Oct 29, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PCheck if you run itEPSS 0.40%Oct 29, 2025
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.TCheck if you run itEPSS 0.27%Oct 29, 2025
- Medium4.3Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Exploiting Incorrectly Configured Access Control Security LCheck if you run itEPSS 0.25%Oct 29, 2025
- Medium4.3Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issCheck if you run itEPSS 0.19%Oct 29, 2025
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This iCheck if you run itEPSS 0.22%Oct 29, 2025
Sort