Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gaiCheck if you run itEPSS 2.13%May 13, 2025
- Low2.1A vulnerability has been identified in Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC SSO (Mendix 9 compatible) (All versions < V3.3.1), Mendix OIDCCheck if you run itEPSS 0.28%May 13, 2025
- Critical9.3A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0).Check if you run itEPSS 0.64%May 13, 2025
- High8.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.Check if you run itEPSS 0.44%May 13, 2025
- High8.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7.Check if you run itEPSS 0.47%May 13, 2025
- Medium6.2SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings.Check if you run itEPSS 0.36%May 13, 2025
- Critical10.0The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload rCheck if you run itEPSS 0.83%May 13, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.2owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.Check if you run itEPSS 0.43%May 13, 2025
- Critical9.8rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.Check if you run itEPSS 0.45%May 13, 2025
- Medium5.8An administrator could discover another account's credentials.Check if you run itEPSS 0.30%May 12, 2025
- Low2.7An authenticated administrator could modify the Created By username for a user accountCheck if you run itEPSS 0.26%May 12, 2025
- High7.5An authenticated user without user administrative permissions could change the administrator Account Name.Check if you run itEPSS 0.33%May 12, 2025
- Medium6.1VMware Tools contains an insecure file handling vulnerability.Check if you run itEPSS 0.27%May 12, 2025
- Medium6.9The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions.Check if you run itEPSS 0.35%May 12, 2025
- Medium6.9A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.56%May 12, 2025
- Medium6.9A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 12, 2025
- Unknownwavlink wl-wn533a8_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.10%May 12, 2025
- Medium5.3A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic.Check if you run itEPSS 0.57%May 11, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0.Check if you run itEPSS 0.40%May 11, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.57%May 11, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in LyLme Spage 2.1.Check if you run itEPSS 0.52%May 11, 2025
- Medium5.3A vulnerability classified as critical has been found in LmxCMS 1.41.Check if you run itEPSS 0.55%May 11, 2025
- High8.8The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserActCheck if you run itEPSS 0.46%May 10, 2025
- Medium5.1A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic.Check if you run itEPSS 0.38%May 10, 2025
Sort