Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attaCheck if you run itEPSS 0.45%Nov 6, 2025
- Medium6.1The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsp_list_attention_search' parameter iCheck if you run itEPSS 0.27%Nov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- None0.0Not usedOpen the advisoryNov 6, 2025
- High7.3A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver.Check if you run itEPSS 0.13%Nov 6, 2025
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 8.6.0 via the getFullConCheck if you run itEPSS 0.21%Nov 6, 2025
- Medium5.3The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass.Check if you run itEPSS 0.32%Nov 6, 2025
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to limited file upload due to an incorrect capability check on theuploadVideo() function in aCheck if you run itEPSS 0.19%Nov 6, 2025
- Medium4.8Cross-site scripting vulnerability exists in GROWI prior to v7.2.10.Check if you run itEPSS 0.18%Nov 6, 2025
- Medium4.3The Easy Email Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Nov 6, 2025
- Medium4.9The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on thCheck if you run itEPSS 0.30%Nov 6, 2025
- High8.7MARIN3R is a lightweight, CRD based envoy control plane for kubernetes.Check if you run itEPSS 0.22%Nov 6, 2025
- High8.9Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.63%Nov 6, 2025
- High7.1A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are not sanitized or encoded before being inserted into the generaCheck if you run itEPSS 0.36%Nov 6, 2025
- High7.1An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attackers to inject and execute arbitrary JavaScript in a victim'sCheck if you run itEPSS 0.36%Nov 6, 2025
- High7.5An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFacCheck if you run itEPSS 0.51%Nov 6, 2025
- High7.5A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1.Check if you run itEPSS 0.51%Nov 6, 2025
- High8.1alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.40%Nov 6, 2025
Sort