Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and includCheck if you run itEPSS 0.30%Jun 12, 2025
- Medium4.6A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (ACheck if you run itEPSS 0.41%Jun 12, 2025
- Medium6.9Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125.Check if you run itEPSS 0.13%Jun 12, 2025
- High8.8The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to arbitrary file uploads due to missing file type validation in theCheck if you run itEPSS 0.62%Jun 12, 2025
- Critical9.8The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1.Check if you run itEPSS 0.48%Jun 12, 2025
- Medium5.1A vulnerability was found in kiCode111 like-girl 5.2.0 and classified as critical.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.1A vulnerability has been found in kiCode111 like-girl 5.2.0 and classified as critical.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.1A vulnerability, which was classified as critical, was found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.42%Jun 12, 2025
- Medium5.1A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.41%Jun 12, 2025
- High7.5Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unCheck if you run itEPSS 0.63%Jun 12, 2025
- Medium6.5uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go.Check if you run itEPSS 0.39%Jun 12, 2025
- Critical9.2Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.Check if you run itEPSS 0.56%Jun 11, 2025
- Medium6.7A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.Check if you run itEPSS 0.31%Jun 11, 2025
- High8.5A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered.Check if you run itEPSS 0.34%Jun 11, 2025
- Medium5.9Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.38%Jun 11, 2025
- Critical9.8CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.Check if you run itEPSS 0.41%Jun 11, 2025
- Medium5.3IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks againCheck if you run itEPSS 0.28%Jun 11, 2025
- Medium5.5IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.21%Jun 11, 2025
- High7.5IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could allow an authenticated user to cause a denial of service by sending aCheck if you run itEPSS 0.40%Jun 11, 2025
- Medium5.5os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink.Check if you run itEPSS 0.33%Jun 11, 2025
- High7.0Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens.Check if you run itEPSS 0.28%Jun 11, 2025
- High7.2An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend.Check if you run itEPSS 0.82%Jun 11, 2025
- High8.3A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token.Check if you run itEPSS 0.23%Jun 11, 2025
- Medium6.8Sensitive headers not cleared on cross-origin redirect in net/httpCheck if you run itEPSS 0.67%Jun 11, 2025
Sort