Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16.Check if you run itEPSS 0.35%Dec 11, 2025
- Medium5.8The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versCheck if you run itEPSS 0.26%Dec 11, 2025
- Medium6.5Pyrofork is a modern, asynchronous MTProto API framework.Check if you run itEPSS 0.32%Dec 11, 2025
- High8.5Ibexa is a composable end-to-end DXP (Digital Experience Platform).Check if you run itEPSS 0.14%Dec 11, 2025
- Medium5.3ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.22%Dec 11, 2025
- High8.7Form.io is a combined Form and API platform for Serverless applications.Check if you run itEPSS 0.31%Dec 11, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Dec 11, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Dec 11, 2025
- Medium5.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.26%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- High8.8An issue was discovered in cPanel 110 through 132.Check if you run itEPSS 0.83%Dec 11, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file toCheck if you run itEPSS 0.54%Dec 11, 2025
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary codeCheck if you run itEPSS 0.57%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interCheck if you run itEPSS 0.21%Dec 11, 2025
- High8.8An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHPCheck if you run itEPSS 0.53%Dec 11, 2025
- Medium5.3Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers.Check if you run itEPSS 0.17%Dec 11, 2025
- High7.5Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG.Check if you run itEPSS 0.32%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the module_update inCheck if you run itEPSS 2.07%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /usr/lib/lua/luCheck if you run itEPSS 3.14%Dec 11, 2025
- High7.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_geCheck if you run itEPSS 1.30%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to thCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_seCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_seCheck if you run itEPSS 2.57%Dec 11, 2025
Sort