Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt for virtual function The device interrupt vector 3 is an errorCheck if you run itEPSS 0.25%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpu_latency_qos_add/remove/update_requCheck if you run itEPSS 0.24%Nov 12, 2025
- Medium4.3Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.Check if you run itEPSS 0.21%Nov 12, 2025
- Medium4.3The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1.Check if you run itEPSS 0.17%Nov 12, 2025
- Medium6.5A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request.Check if you run itEPSS 0.16%Nov 12, 2025
- High8.8A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary codeCheck if you run itEPSS 0.27%Nov 12, 2025
- Medium6.8A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).Check if you run itEPSS 0.14%Nov 11, 2025
- High8.9A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API.Check if you run itEPSS 0.18%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.18%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- High7.5The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the age_restrictionRemoteSupportRequest function, allowing any authenticated users, such as subscrCheck if you run itEPSS 0.24%Nov 11, 2025
- Medium6.1The YSlider plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.1.Check if you run itEPSS 0.15%Nov 11, 2025
- Medium4.3The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.16%Nov 11, 2025
- Medium6.1The WP-Walla plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 0.5.3.5.Check if you run itEPSS 0.16%Nov 11, 2025
- Medium4.3The WP Custom Admin Login Page Logo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.8.4.Check if you run itEPSS 0.13%Nov 11, 2025
- Medium4.3The CTL Arcade Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.15%Nov 11, 2025
- Medium5.3Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs.Check if you run itEPSS 0.50%Nov 11, 2025
- Medium5.1Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of proper validation of user input by sending a POST request usiCheck if you run itEPSS 0.21%Nov 10, 2025
- Medium5.1Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affectsCheck if you run itEPSS 0.21%Nov 10, 2025
- Medium4.5Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System.Check if you run itEPSS 0.23%Nov 10, 2025
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to peCheck if you run itEPSS 0.21%Nov 10, 2025
Sort