Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Credentials are not cleared from memory after being used.Check if you run itEPSS 0.21%Jun 29, 2025
- Medium5.1A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.40%Jun 29, 2025
- Medium5.1A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical.Check if you run itEPSS 0.40%Jun 29, 2025
- High7.8A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access tCheck if you run itEPSS 0.66%Jun 28, 2025
- Medium4.3The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incCheck if you run itEPSS 0.17%Jun 28, 2025
- Critical9.8The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 throughCheck if you run itEPSS 0.69%Jun 28, 2025
- Medium5.0In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal.Check if you run itEPSS 1.85%Jun 28, 2025
- Medium6.4Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting inCheck if you run itEPSS 0.11%Jun 27, 2025
- High7.6A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions.Check if you run itEPSS 0.26%Jun 27, 2025
- Medium4.6Canon EOS Webcam Utility Pro for MAC OS version 2.3d (2.3.29) and earlier contains an improper directory permissions vulnerability.Check if you run itEPSS 0.18%Jun 26, 2025
- Medium4.2Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator.Check if you run itEPSS 0.17%Jun 26, 2025
- Critical9.8Certain hybrid DVR models ((HBF-09KD and HBF-16NK)) from Hunt Electronic have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to direcCheck if you run itEPSS 0.55%Jun 26, 2025
- None0.0A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stCheck if you run itEPSS 0.14%Jun 26, 2025
- High7.2A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, whiCheck if you run itEPSS 0.16%Jun 26, 2025
- High7.2The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3.5.19 due to insufficient inputCheck if you run itEPSS 0.30%Jun 26, 2025
- High8.7A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC).Check if you run itEPSS 0.30%Jun 26, 2025
- Critical9.8The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.Check if you run itEPSS 2.59%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.43%Jun 26, 2025
- Medium5.3A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical.Check if you run itEPSS 0.39%Jun 25, 2025
- Medium6.4A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass the authorization mechanisms fCheck if you run itEPSS 0.36%Jun 25, 2025
- Medium5.1A vulnerability was found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.40%Jun 25, 2025
- High8.5Multiple Brother driver installers for Windows contain a privilege escalation vulnerability.Check if you run itEPSS 0.18%Jun 25, 2025
- High7.5The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_files() function in all versionsCheck if you run itEPSS 0.68%Jun 25, 2025
- High8.8IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i.Check if you run itEPSS 0.54%Jun 25, 2025
- Medium5.0Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, poCheck if you run itEPSS 0.47%Jun 24, 2025
Sort