Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service.Check if you run itEPSS 0.86%Jun 18, 2025
- High7.2The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versionsCheck if you run itEPSS 1.09%Jun 18, 2025
- High7.2The CSV Me plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'csv_me_options_page' function in all versions up to, and inCheck if you run itEPSS 0.64%Jun 18, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- High7.5IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i.Check if you run itEPSS 0.42%Jun 17, 2025
- Low1.0conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting.Check if you run itEPSS 0.18%Jun 17, 2025
- Critical9.1A privilege escalation from host to domain vulnerability was found in the FreeIPA project.Check if you run itEPSS 1.99%Jun 17, 2025
- Medium4.8Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface.Check if you run itEPSS 0.32%Jun 17, 2025
- Medium5.1A vulnerability classified as critical was found in Webkul QloApps 1.6.1.Check if you run itEPSS 0.57%Jun 17, 2025
- Medium4.8The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site ScriptCheck if you run itEPSS 0.26%Jun 17, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical.Check if you run itEPSS 0.51%Jun 17, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0.Check if you run itEPSS 0.34%Jun 16, 2025
- Medium4.8A vulnerability was found in PHPGurukul Rail Pass Management System 1.0.Check if you run itEPSS 0.30%Jun 16, 2025
- High7.8In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.Check if you run itEPSS 0.20%Jun 16, 2025
- Low3.8A vulnerability in the OTRS Admin Interface and Agent Interface (versions before OTRS 8) allow parameter injection due to for an autheniticated agent or admin user.Check if you run itEPSS 0.28%Jun 16, 2025
- Medium5.3A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic.Check if you run itEPSS 0.28%Jun 16, 2025
- Critical9.3A vulnerability was found in UTT 进取 750W up to 5.0.Check if you run itEPSS 1.46%Jun 16, 2025
- Medium6.9A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical.Check if you run itEPSS 0.70%Jun 16, 2025
- UnknownCisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%Jun 16, 2025
- Medium6.9Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.Check if you run itEPSS 0.37%Jun 15, 2025
- Medium6.4The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ssa_admin_upcomingCheck if you run itEPSS 0.29%Jun 14, 2025
- Medium4.3The Yougler Blogger Profile Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, v1.01.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium4.3The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium6.1The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.Check if you run itEPSS 0.13%Jun 14, 2025
- Medium6.1The Easy Flashcards plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.Check if you run itEPSS 0.22%Jun 14, 2025
Sort