Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Missing Authorization vulnerability in sparklewpthemes Construction Light construction-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.20%Dec 18, 2025
- Medium5.4Missing Authorization vulnerability in sparklewpthemes Sparkle FSE sparkle-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sparkle FSCheck if you run itEPSS 0.20%Dec 18, 2025
- Medium5.3Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.22%Dec 18, 2025
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control SecurCheck if you run itEPSS 0.24%Dec 18, 2025
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Tuturn allows Path Traversal.This issue affects Tuturn: from n/a before 3Check if you run itEPSS 0.35%Dec 18, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6.Check if you run itEPSS 0.42%Dec 18, 2025
- High8.7due to insufficient sanitazation in Vega’s function when is enabled and the spec variable is an array.Check if you run itEPSS 0.29%Dec 18, 2025
- Medium4.3Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.ThCheck if you run itEPSS 0.21%Dec 18, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This isCheck if you run itEPSS 0.16%Dec 18, 2025
- Medium6.5Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affecCheck if you run itEPSS 0.24%Dec 18, 2025
- Critical9.3A security flaw has been discovered in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.98%Dec 18, 2025
- Medium6.9A vulnerability was identified in Campcodes Supplier Management System 1.0.Check if you run itEPSS 0.39%Dec 18, 2025
- Medium5.3In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticatedCheck if you run itEPSS 0.15%Dec 18, 2025
- Low2.0ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.21%Dec 18, 2025
- High7.3Tina is a headless content management system.Check if you run itEPSS 0.48%Dec 18, 2025
- Medium4.8Arduino IDE is an integrated development environment.Check if you run itEPSS 0.13%Dec 18, 2025
- Medium4.8Arduino IDE is an integrated development environment.Check if you run itEPSS 0.13%Dec 18, 2025
- High7.1In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly referencing the resource in question.Check if you run itEPSS 0.19%Dec 18, 2025
- High7.1WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) is vulnerable to Broken Access Control in initial configuration wizard.cgi endpoint.Check if you run itEPSS 0.18%Dec 18, 2025
- High7.1In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) admin password is stored in configuration file as plaintext and can be obtained by unauthorized user by direct refCheck if you run itEPSS 0.18%Dec 18, 2025
- Critical9.4In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of validation in the langGet parameter in the adm.cgi endpoint, the malicious attacker can execute sysCheck if you run itEPSS 2.70%Dec 18, 2025
- High8.7In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration change module in the adm.cgi endpoint, the unauthenticated attaCheck if you run itEPSS 0.34%Dec 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is usCheck if you run itEPSS 0.20%Dec 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'imm_tq' is initializeCheck if you run itEPSS 0.23%Dec 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: fix use-after-free caused by uec->work The delayed work uec->work is scheduled in gaokun_ucsi_Check if you run itEPSS 0.20%Dec 18, 2025
Sort