Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.60%Dec 30, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appointify Appointify appointify allows Blind SQL Injection.This issue affectsCheck if you run itEPSS 0.35%Dec 30, 2025
- Medium4.0ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Dec 30, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in ConoHa by GMO WING WordPress Migrator wing-migrator allows Upload a Web Shell to a Web Server.This issue affects WING WordPress MCheck if you run itEPSS 0.21%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revmakx WPCal.io wpcal allows DOM-Based XSS.This issue affects WPCal.io: fromCheck if you run itEPSS 0.23%Dec 30, 2025
- Medium6.9A vulnerability was identified in Edimax BR-6208AC 1.02/1.03.Check if you run itEPSS 3.76%Dec 30, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Merv Barrett Import into Easy Property Listings easy-property-listings-xml-csv-import allows Cross Site Request Forgery.This issuCheck if you run itEPSS 0.17%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dmccan Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: froCheck if you run itEPSS 0.16%Dec 30, 2025
- Medium5.3ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.65%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeFlavors Featured Video for WordPress – VideographyWP videographywp allowsCheck if you run itEPSS 0.15%Dec 30, 2025
- Low1.3Composer is a dependency manager for PHP.Check if you run itEPSS 0.45%Dec 30, 2025
- Medium5.3Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access ControlCheck if you run itEPSS 0.28%Dec 30, 2025
- Medium6.3Discourse is an open source discussion platform.Check if you run itEPSS 0.29%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcreations907 WBC907 Core wbc907-core allows Stored XSS.This issue affects WCheck if you run itEPSS 0.16%Dec 30, 2025
- Critical9.3A vulnerability was determined in Tenda W6-S 1.0.0.4(510).Check if you run itEPSS 4.65%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStoCheck if you run itEPSS 0.16%Dec 30, 2025
- Medium5.3A vulnerability was found in Tenda W6-S 1.0.0.4(510).Check if you run itEPSS 3.73%Dec 30, 2025
- High8.7A vulnerability has been found in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 0.74%Dec 30, 2025
- High8.7A flaw has been found in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 3.33%Dec 30, 2025
- Medium6.3A vulnerability was detected in beecue FastBee up to 2.1.Check if you run itEPSS 0.34%Dec 30, 2025
- Medium5.1A security vulnerability has been detected in 08CMS Novel System up to 3.4.Check if you run itEPSS 0.27%Dec 30, 2025
- Medium5.1A weakness has been identified in zhujunliang3 work_platform up to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31.Check if you run itEPSS 0.22%Dec 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing the device In pci_endpoint_test_remove(), freeing the IRQs afCheck if you run itEPSS 0.14%Dec 30, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by thCheck if you run itEPSS 0.14%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: dm: fix a race condition in retrieve_deps There's a race condition in the multipath target when retrieve_deps raCheck if you run itEPSS 0.18%Dec 30, 2025
Sort