Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges.Check if you run itEPSS 0.39%Nov 5, 2025
- Medium6.8GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation.Check if you run itEPSS 0.13%Nov 5, 2025
- UnknownAtlassian Confluence Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.22%Nov 5, 2025
- Low2.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.33%Nov 4, 2025
- Critical10.0Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests.Check this weekEPSS 75.00%Nov 4, 2025
- Medium6.1The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.Check this weekEPSS 12.00%Nov 4, 2025
- Medium6.1The MapMap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The LMB^Box Smileys plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium5.4The Social Media WPCF7 Stop Words plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.3.Check if you run itEPSS 0.13%Nov 4, 2025
- Medium6.1The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in all versions up to, and including, 1.1.5.Check if you run itEPSS 0.15%Nov 4, 2025
- Medium6.1The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.Check if you run itEPSS 0.15%Nov 4, 2025
- Medium4.3The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0Check if you run itEPSS 0.13%Nov 4, 2025
- Medium4.3The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Nov 4, 2025
- Medium6.1The Label Plugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium4.3The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.5Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.Check this weekEPSS 12.00%Nov 4, 2025
- High7.8Memory corruption while processing request sent from GVM.Check if you run itEPSS 0.09%Nov 4, 2025
- Medium6.9lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing.Check this weekEPSS 37.00%Nov 3, 2025
- High7.1IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows some IdentityIQ web sCheck if you run itEPSS 0.22%Nov 3, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- High8.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.38%Nov 1, 2025
Sort