Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields.Check if you run itEPSS 0.70%Dec 24, 2025
- Critical9.3Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounCheck if you run itEPSS 0.64%Dec 24, 2025
- Medium5.1Synaccess netBooter NP-0801DU 7.4 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.17%Dec 24, 2025
- Medium5.1Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality.Check if you run itEPSS 0.28%Dec 24, 2025
- Medium6.8Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted databaseCheck if you run itEPSS 0.15%Dec 24, 2025
- High7.1SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials.Check if you run itEPSS 0.37%Dec 24, 2025
- Critical9.3SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through unvalidated POST parameters.Check if you run itEPSS 0.41%Dec 24, 2025
- Medium5.1SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.23%Dec 24, 2025
- Medium6.2IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.Check if you run itEPSS 0.10%Dec 24, 2025
- High7.2A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS.Check if you run itEPSS 0.21%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg() The variable tpgt in usbg_make_tpg() is defined as unsigned lCheck if you run itEPSS 0.20%Dec 24, 2025
- None0.0This CVE id was assigned but later discarded.Check if you run itEPSS 0.00%Dec 24, 2025
- High8.7Under certain circumstances a successful exploitation could result in access to the device.Check if you run itEPSS 0.29%Dec 24, 2025
- High8.7Under certain circumstances a successful exploitation could result in access to the device.Check if you run itEPSS 0.30%Dec 24, 2025
- High8.8Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc.Check if you run itEPSS 0.34%Dec 24, 2025
- Medium5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Echo Call Center Services Trade and Industry Inc.Check if you run itEPSS 0.17%Dec 24, 2025
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PosCheck if you run itEPSS 0.23%Dec 24, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This isCheck if you run itEPSS 0.16%Dec 24, 2025
- Medium5.4Missing Authorization vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affecCheck if you run itEPSS 0.16%Dec 24, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Phishing.This issue affects AcCheck if you run itEPSS 0.49%Dec 24, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five StCheck if you run itEPSS 0.12%Dec 24, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Yannick Lefebvre Link Library link-library allows Server Side Request Forgery.This issue affects Link Library: from n/a throughCheck if you run itEPSS 0.14%Dec 24, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Embeds For YouTube Plugin Support YouTube Embed youtube-embed allows Stored XSCheck if you run itEPSS 0.16%Dec 24, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder alloCheck if you run itEPSS 0.16%Dec 24, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Stored XSS.ThiCheck if you run itEPSS 0.16%Dec 24, 2025
Sort