Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSSCheck if you run itEPSS 0.16%Jan 6, 2026
- Medium4.3Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheateCheck if you run itEPSS 0.18%Jan 6, 2026
- Medium4.3Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affecCheck if you run itEPSS 0.29%Jan 6, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gt3themes Photo Gallery gt3-photo-video-gallery allows Reflected XSS.This issuCheck if you run itEPSS 0.22%Jan 6, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins JobBank jobbank allows Reflected XSS.This issue affects JobBank: froCheck if you run itEPSS 0.22%Jan 6, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Issabella issabella allows PHP Local File InclusiCheck if you run itEPSS 0.39%Jan 6, 2026
- High7.6Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability.Check if you run itEPSS 0.28%Jan 6, 2026
- Medium5.9Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.Check if you run itEPSS 0.21%Jan 6, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the pagebreak plugin.Check if you run itEPSS 0.21%Jan 6, 2026
- High8.6iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartCheck if you run itEPSS 0.31%Jan 6, 2026
- High8.6QiHang Media Web Digital Signage 3.0.9 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept user authentication credentials through cCheck if you run itEPSS 0.31%Jan 6, 2026
- High8.7Arteco Web Client DVR/NVR contains a session hijacking vulnerability with insufficient session ID complexity that allows remote attackers to bypass authentication.Check if you run itEPSS 0.67%Jan 6, 2026
- Medium5.3Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL paraCheck if you run itEPSS 0.54%Jan 6, 2026
- Medium6.9Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls.Check if you run itEPSS 0.97%Jan 6, 2026
- Medium6.9Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints.Check if you run itEPSS 0.64%Jan 6, 2026
- Medium6.9RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files.Check if you run itEPSS 0.43%Jan 6, 2026
- High8.7iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions.Check if you run itEPSS 0.37%Jan 6, 2026
- Medium5.1iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation.Check if you run itEPSS 0.17%Jan 6, 2026
- High8.5TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files.Check if you run itEPSS 0.26%Jan 6, 2026
- High8.7Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces.Check if you run itEPSS 0.39%Jan 6, 2026
- High8.5All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predefined PHP session identifier during the login process.Check if you run itEPSS 0.36%Jan 6, 2026
- Medium5.1Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameteCheck if you run itEPSS 0.43%Jan 6, 2026
- High8.7Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages.Check if you run itEPSS 1.43%Jan 6, 2026
- High8.7SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the edit_config_files CGICheck if you run itEPSS 0.74%Jan 6, 2026
- Medium5.1SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.28%Jan 6, 2026
Sort