Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A weakness has been identified in OGRECave Ogre up to 14.4.1.Check if you run itEPSS 0.15%Sep 26, 2025
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc.Check if you run itEPSS 0.29%Sep 26, 2025
- High7.0In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without vCheck if you run itEPSS 0.25%Sep 26, 2025
- Medium4.8A security flaw has been discovered in OGRECave Ogre up to 14.4.1.Check if you run itEPSS 0.25%Sep 26, 2025
- Medium4.8A vulnerability was identified in BehaviorTree up to 4.7.0.Check if you run itEPSS 0.21%Sep 26, 2025
- Medium4.8A vulnerability was determined in BehaviorTree up to 4.7.0.Check if you run itEPSS 0.25%Sep 26, 2025
- Medium4.8A vulnerability was found in BehaviorTree up to 4.7.0.Check if you run itEPSS 0.21%Sep 26, 2025
- Medium4.8A vulnerability has been found in vstakhov libucl up to 0.9.2.Check if you run itEPSS 0.16%Sep 26, 2025
- High8.6Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proCheck if you run itEPSS 0.31%Sep 26, 2025
- Medium4.3An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontCheck if you run itEPSS 0.32%Sep 26, 2025
- Low3.5An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated usCheck if you run itEPSS 0.25%Sep 26, 2025
- Low3.5An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhiCheck if you run itEPSS 0.26%Sep 26, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject maliCheck if you run itEPSS 0.56%Sep 26, 2025
- High7.5An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of ServCheck if you run itEPSS 0.58%Sep 26, 2025
- Low3.5An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated useCheck if you run itEPSS 0.34%Sep 26, 2025
- High7.5A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication.Check if you run itEPSS 0.64%Sep 26, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro wc-designer-pro allows Upload a Web Shell to a Web Server.This issue affects WooCheck if you run itEPSS 0.39%Sep 26, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Google+ Comments google-plus-comments allows Stored XSS.This issue aCheck if you run itEPSS 0.18%Sep 26, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kontur.us kontur Admin Style kontur-admin-style allows Stored XSS.This issue aCheck if you run itEPSS 0.18%Sep 26, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L.Check if you run itEPSS 0.18%Sep 26, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader:Check if you run itEPSS 0.17%Sep 26, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Space Studio Click & Tweet allows Stored XSS.Check if you run itEPSS 0.18%Sep 26, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rozx Recaptcha – wp recaptcha-wp allows Stored XSS.This issue affects RecaptchCheck if you run itEPSS 0.18%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Ashwani kumar GST for WooCommerce gst-for-woocommerce allows Stored XSS.This issue affects GST for WooCommerce: from n/a throughCheck if you run itEPSS 0.12%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in flytedesk Flytedesk Digital flytedesk-digital allows Stored XSS.This issue affects Flytedesk Digital: from n/a through <= 2018110Check if you run itEPSS 0.12%Sep 26, 2025
Sort