Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusion_map' shortcode in all versions up to, and including, 3.12.1 duCheck if you run itEPSS 0.21%Jul 16, 2025
- High8.1The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Deletion due to a missing capability check on the wpmr_dCheck if you run itEPSS 0.67%Jul 16, 2025
- Medium6.4The Affiliate Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘numColumns’ parameter in all versions up to, and including, 1.0.6 due to insufficieCheck if you run itEPSS 0.27%Jul 16, 2025
- Medium6.4The Brandfolder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 5.0.19 due to insufficient input saniCheck if you run itEPSS 0.29%Jul 16, 2025
- Medium6.8Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions.Check if you run itEPSS 0.23%Jul 16, 2025
- UnknownZyxel emg3525-t50b_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.65%Jul 16, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.32%Jul 16, 2025
- Unknownwp01ru wp01 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.89%Jul 16, 2025
- UnknownCisco Identity Services Engine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Jul 16, 2025
- Medium4.1Vim is an open source, command line text editor.Check if you run itEPSS 0.32%Jul 15, 2025
- Medium5.3An incorrect authorization vulnerability allowed unauthorized read access to the contents of internal repositories for contractor accounts when the Contractors API feature was enabCheck if you run itEPSS 0.31%Jul 15, 2025
- High8.9GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI.Check if you run itEPSS 0.76%Jul 15, 2025
- High8.9GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI.Check if you run itEPSS 0.76%Jul 15, 2025
- Critical9.1An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requestsCheck if you run itEPSS 1.19%Jul 15, 2025
- High7.1Conjur provides secrets management and application identity for infrastructure.Check if you run itEPSS 0.61%Jul 15, 2025
- Medium6.0Conjur provides secrets management and application identity for infrastructure.Check if you run itEPSS 0.45%Jul 15, 2025
- High8.6Conjur provides secrets management and application identity for infrastructure.Check if you run itEPSS 2.24%Jul 15, 2025
- Medium6.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.27%Jul 15, 2025
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.28%Jul 15, 2025
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.28%Jul 15, 2025
- Medium6.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.35%Jul 15, 2025
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.29%Jul 15, 2025
- Medium5.4Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Workspace).Check if you run itEPSS 0.20%Jul 15, 2025
- High8.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Check if you run itEPSS 0.75%Jul 15, 2025
- High8.1Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration).Check if you run itEPSS 0.38%Jul 15, 2025
Sort