Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component.Check if you run itEPSS 1.29%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY.Check if you run itEPSS 0.17%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock,Check if you run itEPSS 0.40%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP sockeCheck if you run itEPSS 0.21%Aug 22, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx_list and anoCheck if you run itEPSS 0.36%Aug 22, 2025
- Medium5.3Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin:Check if you run itEPSS 0.22%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.3.Check if you run itEPSS 0.14%Aug 22, 2025
- Medium4.3Missing Authorization vulnerability in ollybach WPPizza wppizza allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPPizza: from n/a throughCheck if you run itEPSS 0.24%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: fromCheck if you run itEPSS 0.14%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics fCheck if you run itEPSS 0.13%Aug 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpecommerce Recurring PayPal Donations recurring-donation allows Stored XSS.ThCheck if you run itEPSS 0.18%Aug 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions:Check if you run itEPSS 0.18%Aug 22, 2025
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue afCheck if you run itEPSS 0.25%Aug 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects JobmonCheck if you run itEPSS 0.17%Aug 22, 2025
- Medium5.4Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly ConCheck if you run itEPSS 0.24%Aug 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a throuCheck if you run itEPSS 0.13%Aug 22, 2025
- Medium4.3Missing Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This iCheck if you run itEPSS 0.20%Aug 22, 2025
- High7.1WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary sCheck if you run itEPSS 0.55%Aug 22, 2025
- High7.1WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary sCheck if you run itEPSS 0.55%Aug 22, 2025
- High7.1WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary sCheck if you run itEPSS 0.55%Aug 22, 2025
- High7.1WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary sCheck if you run itEPSS 0.55%Aug 22, 2025
- High8.7WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.Check if you run itEPSS 0.52%Aug 22, 2025
- Critical9.3WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specificCheck if you run itEPSS 0.65%Aug 22, 2025
- Medium4.3The Spacious theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'welcome_notice_import_handler' function in all versionCheck if you run itEPSS 0.32%Aug 22, 2025
- None0.0Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.18%Aug 22, 2025
Sort