Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to peCheck if you run itEPSS 1.89%Nov 18, 2025
- Medium4.3A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index.Check if you run itEPSS 0.35%Nov 18, 2025
- Medium5.1A vulnerability has been found in SourceCodester Student Grades Management System 1.0.Check if you run itEPSS 0.28%Nov 18, 2025
- Medium5.4Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowedCheck if you run itEPSS 0.18%Nov 18, 2025
- Medium5.3The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress is vulnerable to Information Exposure in all versions up to, aCheck if you run itEPSS 0.31%Nov 18, 2025
- Medium6.4The Icon List Block – Add Icon-Based Lists with Custom Styles plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.1 via theCheck if you run itEPSS 0.20%Nov 18, 2025
- Medium6.9Windu CMS is vulnerable to User Enumeration.Check if you run itEPSS 0.26%Nov 18, 2025
- Medium6.9Windu CMS is vulnerable to Broken Access Control in user editing functionality.Check if you run itEPSS 0.31%Nov 18, 2025
- Medium4.8Windu CMS is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/.Check if you run itEPSS 0.21%Nov 18, 2025
- Medium5.3Windu CMS is vulnerable to Stored Cross-Site Scripting (XSS) in the logon page where input data has no proper validation.Check if you run itEPSS 0.18%Nov 18, 2025
- Medium5.1Windu CMS is vulnerable to Cross-Site Request Forgery in file uploading functionality.Check if you run itEPSS 0.15%Nov 18, 2025
- Medium6.9Windu CMS implements weak client-side brute-force protection by using parameter loginError.Check if you run itEPSS 0.30%Nov 18, 2025
- Medium5.1Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality.Check if you run itEPSS 0.15%Nov 18, 2025
- Medium6.8Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality.Check if you run itEPSS 0.19%Nov 18, 2025
- Medium5.3A flaw has been found in SourceCodester Train Station Ticketing System 1.0.Check if you run itEPSS 0.33%Nov 18, 2025
- Medium5.3A vulnerability was detected in SourceCodester Train Station Ticketing System 1.0.Check if you run itEPSS 0.33%Nov 18, 2025
- Medium6.8The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.8 via the rest_helpers_create_images function.Check if you run itEPSS 0.45%Nov 18, 2025
- Critical9.8A missing authentication enforcement vulnerability exists in the mutual TLS (mTLS) implementation used by System REST APIs and SOAP services in multiple WSO2 products.Check if you run itEPSS 0.25%Nov 18, 2025
- Medium5.3A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0.Check if you run itEPSS 0.55%Nov 18, 2025
- High8.8A Cross-Site Request Forgery (CSRF) vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifCheck if you run itEPSS 0.25%Nov 18, 2025
- Medium5.1Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation ofCheck if you run itEPSS 0.30%Nov 18, 2025
- Medium5.1Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation ofCheck if you run itEPSS 0.37%Nov 18, 2025
- High8.7SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este.Check if you run itEPSS 0.58%Nov 18, 2025
- High8.7Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este.Check if you run itEPSS 0.37%Nov 18, 2025
- Medium5.8Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Nov 18, 2025
Sort