Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server.Check if you run itEPSS 0.28%Aug 21, 2025
- Medium6.9Phproject is a high performance full-featured project management system.Check if you run itEPSS 0.40%Aug 21, 2025
- Medium6.9Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.1Check if you run itEPSS 0.25%Aug 21, 2025
- Medium6.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.25%Aug 21, 2025
- Medium6.9UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.15%Aug 21, 2025
- High7.3UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.48%Aug 21, 2025
- Medium4.9A flaw was found in org.keycloak/keycloak-model-storage-service.Check if you run itEPSS 0.52%Aug 21, 2025
- High8.0UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.39%Aug 21, 2025
- Medium5.1A vulnerability was detected in SourceCodester Advanced School Management System 1.0.Check if you run itEPSS 0.29%Aug 21, 2025
- Medium5.2ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.36%Aug 21, 2025
- Medium6.9A weakness has been identified in SourceCodester Online Bank Management System 1.0.Check if you run itEPSS 0.44%Aug 21, 2025
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through < 7.2Check if you run itEPSS 0.34%Aug 21, 2025
- High8.5Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the sCheck if you run itEPSS 0.60%Aug 21, 2025
- Medium6.4The Bible SuperSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘selector_height’ parameter in all versions up to, and including, 6.0.1 due to insufCheck if you run itEPSS 0.26%Aug 21, 2025
- Critical9.8The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5.Check if you run itEPSS 0.62%Aug 21, 2025
- Medium6.4The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block's attributeCheck if you run itEPSS 0.20%Aug 21, 2025
- Medium4.3The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the give_update_pCheck if you run itEPSS 0.26%Aug 21, 2025
- High8.1The Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.23%Aug 21, 2025
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded SensitiveCheck if you run itEPSS 0.31%Aug 21, 2025
- Critical9.8Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV SCheck if you run itEPSS 1.19%Aug 21, 2025
- High7.5Tenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function.Check if you run itEPSS 0.40%Aug 21, 2025
- Low3.5agent-zero agent-zero Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.12%Aug 21, 2025
- Medium5.3Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing tCheck if you run itEPSS 0.32%Aug 21, 2025
- High8.8Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying theCheck if you run itEPSS 0.38%Aug 21, 2025
- High8.8Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.Check if you run itEPSS 0.38%Aug 21, 2025
Sort