Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Integer overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application crashes through denial-of-service attacks (DoS).Check if you run itEPSS 0.49%Oct 31, 2025
- Medium5.3An XSS issue was discovered in Afterlogic Aurora webmail version 9.8.3 and below.Check if you run itEPSS 0.44%Oct 31, 2025
- Medium5.3The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the Analytify Tag HTML details.Check if you run itEPSS 0.27%Oct 31, 2025
- High7.7The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done.Check if you run itEPSS 0.35%Oct 31, 2025
- Low3.7IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.16%Oct 31, 2025
- High7.8IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a non-root user to gain higher privileges/capabilities within the scope of a container due to execution withCheck if you run itEPSS 0.14%Oct 31, 2025
- Medium5.1Nagios XI versions prior to < 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the "missing page" (404) page after following a link from another website.Check if you run itEPSS 0.59%Oct 31, 2025
- Medium6.8Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the produCheck if you run itEPSS 0.14%Oct 31, 2025
- High7.5When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have.Check if you run itEPSS 0.43%Oct 31, 2025
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Some Viridian hypercalls can specify a mask of vCPUCheck if you run itEPSS 0.38%Oct 31, 2025
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Some Viridian hypercalls can specify a mask of vCPUCheck if you run itEPSS 0.38%Oct 31, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.Check if you run itEPSS 0.12%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This issue affects GroundCheck if you run itEPSS 0.17%Oct 31, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows BliCheck if you run itEPSS 0.28%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio Extra ohio-extra allows DOM-Based XSS.This issue affects Ohio ExCheck if you run itEPSS 0.17%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Masterstudy masterstudy allows PHP Local FilCheck if you run itEPSS 0.42%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeventhQueen Kleo kleo allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.42%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K ECheck if you run itEPSS 0.17%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Consulting Elementor Widgets consulting-elementor-widgets allowCheck if you run itEPSS 0.17%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Consulting Elementor Widgets consulting-elemCheck if you run itEPSS 0.39%Oct 31, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Consulting consulting allows PHP Local FileCheck if you run itEPSS 0.42%Oct 31, 2025
- Medium4.3Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce wt-smart-coupons-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security LevCheck if you run itEPSS 0.22%Oct 31, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR.Check if you run itEPSS 0.13%Oct 31, 2025
- Medium4.3Missing Authorization vulnerability in f1logic Insert PHP Code Snippet insert-php-code-snippet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.21%Oct 31, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matias Ventura Gutenberg gutenberg allows Stored XSS.This issue affects GutenbCheck if you run itEPSS 0.17%Oct 31, 2025
Sort