Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 2.0.Check if you run itEPSS 0.67%Nov 21, 2025
- Medium6.4The Pollcaster Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter in the 'pollcaster' shortcode in all versions up to, and incluCheck if you run itEPSS 0.24%Nov 21, 2025
- Medium6.1The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all versions up to, and including, 1.0.0 due to insufficient input sCheck if you run itEPSS 0.27%Nov 21, 2025
- Medium6.4The Padlet Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'key' parameter in the 'wallwisher' shortcode in all versions up to, and including, 1Check if you run itEPSS 0.24%Nov 21, 2025
- High8.4Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows).Check if you run itEPSS 0.16%Nov 21, 2025
- Medium6.9LogStare Collector improperly handles the password hash data.Check if you run itEPSS 0.28%Nov 21, 2025
- Medium6.9Cross-site request forgery vulnerability exists in LogStare Collector.Check if you run itEPSS 0.15%Nov 21, 2025
- Medium5.3LogStare Collector contains an incorrect authorization vulnerability in UserRegistration.Check if you run itEPSS 0.25%Nov 21, 2025
- Medium4.8LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement.Check if you run itEPSS 0.19%Nov 21, 2025
- Medium6.8The installation directory of LogStare Collector is configured with incorrect access permissions.Check if you run itEPSS 0.13%Nov 21, 2025
- High7.8Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of serviceCheck if you run itEPSS 0.13%Nov 21, 2025
- Medium5.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 to 18.2.8, 18.3 before 18.3.4, and 18.4 before 18.4.2 that could have allowed authenticated users wiCheck if you run itEPSS 0.39%Nov 21, 2025
- Medium4.3The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_ehCheck if you run itEPSS 0.20%Nov 21, 2025
- Medium4.3The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_setCheck if you run itEPSS 0.20%Nov 21, 2025
- Medium4.3The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_setCheck if you run itEPSS 0.20%Nov 21, 2025
- Medium4.3The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_crm_restCheck if you run itEPSS 0.20%Nov 21, 2025
- Medium5.3thimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.05%Nov 21, 2025
- Critical9.3EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts.Check if you run itEPSS 0.48%Nov 21, 2025
- High8.0The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js.Check if you run itEPSS 0.39%Nov 21, 2025
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.31%Nov 21, 2025
- High8.3vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.41%Nov 21, 2025
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.54%Nov 21, 2025
- High8.8vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.96%Nov 21, 2025
- High8.7Claude Code is an agentic coding tool.Check if you run itEPSS 0.62%Nov 21, 2025
- Medium6.9A security flaw has been discovered in itsourcecode Online File Management System 1.0.Check if you run itEPSS 0.40%Nov 21, 2025
Sort