Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoCheck if you run itEPSS 0.18%Oct 30, 2025
- High7.3A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium6.5The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47.Check if you run itEPSS 0.34%Oct 30, 2025
- Medium5.3The Translate WordPress and go Multilingual – Weglot plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clean_options' functiCheck if you run itEPSS 0.29%Oct 30, 2025
- High7.3A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.Check if you run itEPSS 0.28%Oct 30, 2025
- High7.3A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.Check if you run itEPSS 0.30%Oct 30, 2025
- Medium6.4The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'blocksy_newsletter_subscribe' shortcode in all versions up to, and includiCheck if you run itEPSS 0.20%Oct 30, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Oct 30, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modelCheck if you run itEPSS 0.20%Oct 30, 2025
- Medium5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality.Check if you run itEPSS 0.22%Oct 30, 2025
- High7.5Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password.Check if you run itEPSS 0.31%Oct 30, 2025
- High7.5Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the admiCheck if you run itEPSS 0.33%Oct 30, 2025
- High8.2A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component.Check if you run itEPSS 0.52%Oct 30, 2025
- High7.5A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.Check if you run itEPSS 0.38%Oct 30, 2025
- High8.8An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter.Check if you run itEPSS 0.56%Oct 30, 2025
- High7.5sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -Check if you run itEPSS 1.09%Oct 30, 2025
- High7.5Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage vulnerability.Check if you run itEPSS 0.30%Oct 30, 2025
- High7.5AG Life Logger Android App version v1.0.2.72 and before (package name com.donki.healthy), developed by IO FIT, K.K., contains improper access control vulnerabilities.Check if you run itEPSS 0.30%Oct 30, 2025
- High7.5Kanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C., contains improper access control vulnerabilities.Check if you run itEPSS 0.30%Oct 30, 2025
- High7.5mCarFix Motorists App version 2.3 (package name com.skytop.mcarfix), developed by Paniel Mwaura, contains improper access control vulnerabilities.Check if you run itEPSS 0.31%Oct 30, 2025
- High7.5Senza: Keto & Fasting Android App version 2.10.15 (package name com.gl.senza), developed by Paul Itoi, contains an improper access control vulnerability.Check if you run itEPSS 0.34%Oct 30, 2025
- High7.5AdForest - Classified Android App version 4.0.12 (package name scriptsbundle.adforest), developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in itsCheck if you run itEPSS 0.34%Oct 30, 2025
- High7.5ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an improper access control vCheck if you run itEPSS 0.36%Oct 30, 2025
- High7.52nd Line Android App version v1.2.92 and before (package name com.mysecondline.app), developed by AutoBizLine, Inc., contains an improper access control vulnerability in its authenCheck if you run itEPSS 0.34%Oct 30, 2025
- High7.5TalkTalk 3.3.6 Android App contains improper access control vulnerabilities in multiple API endpoints.Check if you run itEPSS 0.30%Oct 30, 2025
Sort