Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0.Check if you run itEPSS 0.78%May 9, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0.Check if you run itEPSS 0.73%May 9, 2025
- High7.2The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file patCheck if you run itEPSS 1.65%May 9, 2025
- Medium4.8A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.65%May 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_info struct rather than aCheck if you run itEPSS 0.30%May 9, 2025
- Critical9.8The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3.Check if you run itEPSS 0.83%May 9, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 7.70%May 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processCheck if you run itEPSS 0.29%May 9, 2025
- Medium6.9A vulnerability was found in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 1.08%May 9, 2025
- Medium6.9A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0.Check if you run itEPSS 1.00%May 9, 2025
- Critical9.8The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.75%May 9, 2025
- Critical9.8The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.75%May 9, 2025
- Critical9.8SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.Check if you run itEPSS 0.67%May 9, 2025
- Critical10.0On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permisCheck if you run itEPSS 0.66%May 8, 2025
- High8.7On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.Check if you run itEPSS 0.63%May 8, 2025
- High8.7Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.26%May 8, 2025
- Medium6.4The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and including, 2.7.11 dueCheck if you run itEPSS 0.28%May 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT This requirement was overeagerly loosened in cCheck if you run itEPSS 0.22%May 8, 2025
- High8.5When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacCheck this weekEPSS 24.30%May 7, 2025
- High8.3When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing systCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.1An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.Check if you run itEPSS 0.35%May 7, 2025
- Medium6.0A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.Check if you run itEPSS 0.17%May 7, 2025
- High7.1A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the aCheck this weekEPSS 22.24%May 7, 2025
- Critical9.3sysaid sysaid Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.66%May 7, 2025
- Critical9.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_wp_ajax_fed_login_form_post() function in versions 1.Check if you run itEPSS 0.59%May 7, 2025
Sort