Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5.Check if you run itEPSS 0.15%Oct 3, 2025
- Medium6.4The Easy Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in versions less than, or equal to, 2.2.9 due to insufficiCheck if you run itEPSS 0.35%Oct 3, 2025
- Medium5.3The SiteAlert (Formerly WP Health) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to,Check if you run itEPSS 0.38%Oct 3, 2025
- High7.5A flaw was found in QEMU.Check if you run itEPSS 0.86%Oct 3, 2025
- High8.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication Industry Trade Co.Check if you run itEPSS 0.34%Oct 3, 2025
- High7.3Running Lua function as a different userCheck if you run itEPSS 0.74%Oct 3, 2025
- Medium6.3Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 1.09%Oct 3, 2025
- High8.8Lua library commands may lead to integer overflow and potential RCECheck if you run itEPSS 3.92%Oct 3, 2025
- Medium5.9Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.29%Oct 3, 2025
- High8.7Claude Code is an agentic coding tool.Check this weekEPSS 24.89%Oct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.19%Oct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Oct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Oct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Oct 3, 2025
- High7.2MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name.Check this weekEPSS 18.46%Oct 3, 2025
- Medium5.9A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19.Check if you run itEPSS 0.26%Oct 3, 2025
- Medium6.5A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title.Check if you run itEPSS 0.46%Oct 3, 2025
- Medium6.1nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id].Check if you run itEPSS 0.23%Oct 3, 2025
- Medium5.5CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- High7.1WeGIA is an open source web manager with a focus on charitable institutions.Check if you run itEPSS 0.17%Oct 2, 2025
- Low1.8CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.6An unauthenticated debug port may allow access to the device file system.Check if you run itEPSS 0.42%Oct 2, 2025
- Medium5.3CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- Critical9.4WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.43%Oct 2, 2025
- High8.8MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements.Check if you run itEPSS 0.33%Oct 2, 2025
Sort