Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Exploiting Incorrectly Configured Access Control Security LevelsCheck if you run itEPSS 0.32%Dec 16, 2025
- Low2.7Insertion of Sensitive Information Into Sent Data vulnerability in Shinetheme Traveler Option Tree custom-option-tree allows Retrieve Embedded Sensitive Data.This issue affects TraCheck if you run itEPSS 0.27%Dec 16, 2025
- Medium5.3The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the run_callback functCheck if you run itEPSS 0.22%Dec 16, 2025
- Medium5.9The Fancy Product Designer plugin for WordPress is vulnerable to Information Disclosure and PHAR Deserialization in all versions up to, and including, 6.4.8.Check if you run itEPSS 0.31%Dec 16, 2025
- High8.6Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config.Check if you run itEPSS 0.53%Dec 16, 2025
- Medium5.9HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended.Check if you run itEPSS 0.15%Dec 16, 2025
- Medium5.3The Dokan Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the REST API endpoint in all versions up to, and including, 4.1Check if you run itEPSS 0.24%Dec 16, 2025
- Medium4.3The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bulk_action_generate_Check if you run itEPSS 0.30%Dec 16, 2025
- High8.5An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalationCheck if you run itEPSS 0.13%Dec 16, 2025
- Medium6.0A flaw was found in Keycloak.Check if you run itEPSS 0.34%Dec 16, 2025
- Medium6.9CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions.Check if you run itEPSS 0.29%Dec 16, 2025
- Medium5.1CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames.Check if you run itEPSS 0.19%Dec 16, 2025
- High8.7CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions.Check if you run itEPSS 0.39%Dec 16, 2025
- Medium5.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versionsCheck if you run itEPSS 0.89%Dec 16, 2025
- Medium5.3A vulnerability was identified in Ningyuanda TC155 57.0.2.0.Check if you run itEPSS 0.79%Dec 16, 2025
- Medium5.3A vulnerability was determined in Ningyuanda TC155 57.0.2.0.Check if you run itEPSS 0.64%Dec 16, 2025
- High8.1An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.64%Dec 16, 2025
- Medium6.6An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.82%Dec 16, 2025
- High8.1A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.86%Dec 16, 2025
- Medium5.2An SQL injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.97%Dec 16, 2025
- Medium5.3A vulnerability was found in Ningyuanda TC155 57.0.2.0.Check if you run itEPSS 0.71%Dec 16, 2025
- Medium5.3A vulnerability has been found in Ningyuanda TC155 57.0.2.0.Check if you run itEPSS 0.88%Dec 16, 2025
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.22%Dec 16, 2025
- Medium6.5ALTCHA is privacy-first software for captcha and bot protection.Check if you run itEPSS 0.46%Dec 16, 2025
- High7.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.40%Dec 16, 2025
Sort