Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6.Check if you run itEPSS 0.96%Jul 22, 2025
- Medium6.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded image's 'Title' and 'Slide link' fields in all versCheck if you run itEPSS 0.26%Jul 22, 2025
- Medium5.3A vulnerability was found in code-projects Food Ordering Review System 1.0.Check if you run itEPSS 0.44%Jul 22, 2025
- Low3.6A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function.Check if you run itEPSS 0.23%Jul 22, 2025
- Medium4.6Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting.Check if you run itEPSS 0.12%Jul 22, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.21%Jul 22, 2025
- High8.7A vulnerability was found in Tenda AC7 15.03.06.44.Check this weekEPSS 13.20%Jul 22, 2025
- High8.7An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms).Check if you run itEPSS 0.69%Jul 22, 2025
- High8.6: Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door/light 4 DU -83330-500.This issue affects Switch Actuator 4 DU-83330: All Versions; SwCheck if you run itEPSS 0.22%Jul 22, 2025
- Medium5.3The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata.Check if you run itEPSS 0.25%Jul 22, 2025
- Medium6.0The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver.Check if you run itEPSS 0.33%Jul 22, 2025
- Medium6.9Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B.Check if you run itEPSS 0.36%Jul 22, 2025
- High8.6WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI.Check if you run itEPSS 1.02%Jul 22, 2025
- Critical9.8The bSecure plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its order_info REST endpoint in versions 1.3.7 through 1.7.9.Check if you run itEPSS 0.79%Jul 22, 2025
- Medium6.1The Latest Post Accordian Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Jul 22, 2025
- Low2.4Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28.Check if you run itEPSS 0.21%Jul 22, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a.Check if you run itEPSS 0.39%Jul 22, 2025
- Medium5.3A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748.Check this weekEPSS 24.52%Jul 22, 2025
- Medium5.1A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0.Check if you run itEPSS 0.39%Jul 22, 2025
- Medium6.9A vulnerability was found in code-projects Public Chat Room 1.0.Check if you run itEPSS 0.64%Jul 22, 2025
- High7.8Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityPatch nowKEVEPSS 1.36%Jul 22, 2025
- Medium6.5Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sCheck if you run itEPSS 0.37%Jul 22, 2025
- High8.8Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), allowing attackers to gain sensitvie inforCheck if you run itEPSS 0.43%Jul 22, 2025
- Medium6.5A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokensCheck if you run itEPSS 0.41%Jul 22, 2025
- Medium6.1Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code via a crafted SVG file to the chat interfCheck if you run itEPSS 0.34%Jul 22, 2025
Sort