Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6HCL MyXalytics v6.6 is affected by an HTML Injection.Check if you run itEPSS 0.18%Oct 3, 2025
- Medium5.1A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.47%Oct 3, 2025
- Medium5.1A command injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 1.33%Oct 3, 2025
- High7.1OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafteCheck if you run itEPSS 0.68%Oct 3, 2025
- Critical9.4The module will parse a node which is not a child of a structural node.Check if you run itEPSS 0.22%Oct 3, 2025
- Critical9.4When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoSCheck if you run itEPSS 0.22%Oct 3, 2025
- Critical10.0Redis redis Use After FreePatch nowKEVEPSS 82.64%Oct 3, 2025
- Medium5.9Use of Hard-coded Credentials vulnerability in Logo Software Inc.Check if you run itEPSS 0.15%Oct 3, 2025
- High7.3In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local pCheck if you run itEPSS 0.33%Oct 3, 2025
- Medium4.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Isin Basi Advertisement Information Technologies Trade Inc.Check if you run itEPSS 0.21%Oct 3, 2025
- Medium4.3The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium4.3The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium6.4The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'adv_parallax_back' shortcode in all versions up to, and including, 3.8.2 due tCheck if you run itEPSS 0.24%Oct 3, 2025
- High7.5The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wp_dispatcher_process_upload() function in all versions upCheck if you run itEPSS 0.52%Oct 3, 2025
- Medium4.3The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean() function in all versions up to, and includinCheck if you run itEPSS 0.20%Oct 3, 2025
- Medium6.4The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and including, 1.0.16.Check if you run itEPSS 0.25%Oct 3, 2025
- Medium6.4The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due tCheck if you run itEPSS 0.25%Oct 3, 2025
- Medium6.3The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untCheck if you run itEPSS 0.27%Oct 3, 2025
- Medium4.3The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium6.4The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abf_vehicle' shortcode in all versions up to, and including,Check if you run itEPSS 0.24%Oct 3, 2025
- Medium4.3The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.17%Oct 3, 2025
- Medium4.3The WP SinoType plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%Oct 3, 2025
- High8.8The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user suCheck if you run itEPSS 0.35%Oct 3, 2025
- Medium6.4The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and inclCheck if you run itEPSS 0.21%Oct 3, 2025
- Medium4.3The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11.Check if you run itEPSS 0.20%Oct 3, 2025
Sort