Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and eaCheck if you run itEPSS 1.06%Dec 30, 2025
- High7.1TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.Check if you run itEPSS 0.18%Dec 30, 2025
- High7.3A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display NameCheck if you run itEPSS 0.31%Dec 30, 2025
- High7.3A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813.Check if you run itEPSS 0.31%Dec 30, 2025
- Low3.5An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functioCheck if you run itEPSS 0.19%Dec 30, 2025
- High7.5inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paCheck if you run itEPSS 0.41%Dec 30, 2025
- Medium6.5An issue was discovered in Zeroheight (SaaS) prior to 2025-06-13.Check if you run itEPSS 0.26%Dec 30, 2025
- High7.5A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_patCheck if you run itEPSS 0.57%Dec 30, 2025
- High7.5A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty value as a password.Check if you run itEPSS 0.36%Dec 30, 2025
- High7.5nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal.Check if you run itEPSS 0.73%Dec 30, 2025
- Critical9.1Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default ConfigurationCheck if you run itEPSS 0.43%Dec 30, 2025
- Critical9.8DO NOT USE THIS CVE RECORD.Check this weekEPSS 41.00%Dec 30, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jakub Glos Off Page SEO off-page-seo allows Reflected XSS.This issue affects OCheck if you run itEPSS 0.18%Dec 29, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kemal YAZICI Product Puller product-puller allows Reflected XSS.This issue affCheck if you run itEPSS 0.18%Dec 29, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sleekplan Sleekplan sleekplan allows Reflected XSS.This issue affects SleekplaCheck if you run itEPSS 0.18%Dec 29, 2025
- Medium5.4To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.Check if you run itEPSS 0.45%Dec 29, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rakessh Ads24 Lite wp-ad-management allows Reflected XSS.This issue affects AdCheck if you run itEPSS 0.18%Dec 29, 2025
- Medium5.3A security vulnerability has been detected in code-projects Refugee Food Management System 1.0.Check if you run itEPSS 0.37%Dec 29, 2025
- High7.5Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a thrCheck if you run itEPSS 0.28%Dec 29, 2025
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP PrCheck if you run itEPSS 0.26%Dec 29, 2025
- Medium5.4Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor AdCheck if you run itEPSS 0.24%Dec 29, 2025
- Medium5.4Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.Check if you run itEPSS 0.20%Dec 29, 2025
- Medium6.5Missing Authorization vulnerability in Crocoblock JetTabs jet-tabs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetTabs: from n/a throCheck if you run itEPSS 0.24%Dec 29, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: fCheck if you run itEPSS 0.16%Dec 29, 2025
- Medium5.3A weakness has been identified in code-projects Refugee Food Management System 1.0.Check if you run itEPSS 0.37%Dec 29, 2025
Sort