Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.Check if you run itEPSS 0.56%Jun 11, 2025
- High7.3ClipShare is a lightweight and cross-platform tool for clipboard sharing.Check if you run itEPSS 0.17%Jun 11, 2025
- Medium6.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1Check if you run itEPSS 0.31%Jun 11, 2025
- Medium4.1Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administraCheck if you run itEPSS 0.28%Jun 11, 2025
- High8.8The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.Check if you run itEPSS 0.53%Jun 11, 2025
- High7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, aCheck if you run itEPSS 0.94%Jun 11, 2025
- Medium4.9The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10.Check if you run itEPSS 0.42%Jun 11, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 0.23%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- Medium4.7In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs.Check if you run itEPSS 0.67%Jun 10, 2025
- High8.1When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used toCheck if you run itEPSS 0.66%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and sCheck if you run itEPSS 0.59%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password ofCheck if you run itEPSS 0.59%Jun 10, 2025
- Medium5.1A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic.Check if you run itEPSS 0.29%Jun 10, 2025
- Medium5.1A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium4.8A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium4.8A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium4.8A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic.Check if you run itEPSS 0.31%Jun 10, 2025
- Medium6.5An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7Check if you run itEPSS 0.85%Jun 10, 2025
- High7.1SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL.Check if you run itEPSS 0.21%Jun 10, 2025
- High7.3A privilege escalation vulnerability may enable a service account to elevate its privileges.Check if you run itEPSS 0.14%Jun 10, 2025
- High7.5An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands.Check if you run itEPSS 1.02%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
- Medium6.9An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.33%Jun 10, 2025
Sort