Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The "Amazon affiliate lite Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.0 due to insufficiCheck if you run itEPSS 0.23%Dec 20, 2025
- Medium4.3The Quran Gateway plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.Check if you run itEPSS 0.15%Dec 20, 2025
- Medium5.3In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF (Windows and DOS) End-of-Record (EOR) characters in delimited fileCheck if you run itEPSS 0.28%Dec 20, 2025
- High8.7The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication.Check if you run itEPSS 0.37%Dec 20, 2025
- High7.1The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow.Check if you run itEPSS 0.24%Dec 20, 2025
- High8.7A stack-based buffer overflow vulnerability was identified in the ONVIF SOAP XML Parser in Tapo C200 v3 and C520WS v2.6.Check if you run itEPSS 0.53%Dec 20, 2025
- Medium5.1WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating web pages.Check if you run itEPSS 0.24%Dec 19, 2025
- High8.5FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory.Check if you run itEPSS 0.85%Dec 19, 2025
- High8.6LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation.Check if you run itEPSS 0.41%Dec 19, 2025
- High8.5Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation.Check if you run itEPSS 0.59%Dec 19, 2025
- High8.7Flatnux 2021-03.25 contains an authenticated file upload vulnerability that allows administrative users to upload arbitrary PHP files through the file manager.Check if you run itEPSS 0.77%Dec 19, 2025
- High8.5ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuratiCheck if you run itEPSS 0.14%Dec 19, 2025
- High8.7Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creationCheck if you run itEPSS 1.13%Dec 19, 2025
- Critical9.3Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation.Check if you run itEPSS 0.36%Dec 19, 2025
- Critical9.3Lilac-Reloaded for Nagios 2.0.8 contains a remote code execution vulnerability in the autodiscovery feature that allows attackers to inject arbitrary commands.Check if you run itEPSS 0.93%Dec 19, 2025
- High8.7BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface.Check if you run itEPSS 1.11%Dec 19, 2025
- Medium5.9FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project.Check if you run itEPSS 0.26%Dec 19, 2025
- Medium4.7There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a userCheck if you run itEPSS 0.33%Dec 19, 2025
- Medium6.3Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP RequCheck if you run itEPSS 0.50%Dec 19, 2025
- Medium6.9A vulnerability was identified in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 19, 2025
- Medium6.9A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0.Check if you run itEPSS 0.38%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
Sort