Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in captcha.eu Captcha.eu captcha-eu allows Server Side Request Forgery.This issue affects Captcha.eu: from n/a through <= 1.0.61.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Cross Site Request Forgery.This issue affects ECheck if you run itEPSS 0.14%Oct 22, 2025
- Medium4.7Cross-Site Request Forgery (CSRF) vulnerability in Code Amp Search & Filter search-filter allows Cross Site Request Forgery.This issue affects Search & Filter: from n/a through <=Check if you run itEPSS 0.19%Oct 22, 2025
- Medium4.8A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header.Check this weekEPSS 45.00%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() is allocated in pcf50633_adc_async_read(),Check if you run itEPSS 0.21%Oct 22, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the head before weCheck if you run itEPSS 0.39%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pch_request_dma() As comment of pci_get_slot() says, it returns a pCheck if you run itEPSS 0.25%Oct 22, 2025
- Medium4.3The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 via the save_refund_reCheck if you run itEPSS 0.19%Oct 22, 2025
- Medium4.3The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 11.1.2.Check if you run itEPSS 0.16%Oct 22, 2025
- Medium5.0The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wp_ajax_import_eleCheck if you run itEPSS 0.24%Oct 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 ("netfs: Fix the request's work item to not require a ref") modifiCheck if you run itEPSS 0.22%Oct 20, 2025
- Critical9.3Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel VulnerabilityPatch nowKEVEPSS 2.77%Oct 20, 2025
- High8.8Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their GCheck if you run itEPSS 0.36%Oct 18, 2025
- High8.8The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.Check if you run itEPSS 0.40%Oct 18, 2025
- Medium6.4The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includingCheck if you run itEPSS 0.30%Oct 18, 2025
- Medium5.4The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on tCheck if you run itEPSS 0.31%Oct 18, 2025
- Medium6.9ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature.Check if you run itEPSS 1.82%Oct 17, 2025
- Medium4.3The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0.Check if you run itEPSS 0.27%Oct 17, 2025
- UnknownCisco smart_software_manager_on-prem Unverified Password ChangePatch nowKEVEPSS 80.92%Oct 17, 2025
- Medium4.9An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for Windows 11.5.1 and 11.Check if you run itEPSS 0.21%Oct 16, 2025
- High7.2An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS 11.5.1 and 11.4.Check if you run itEPSS 0.21%Oct 16, 2025
- Medium4.3The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.0.Check if you run itEPSS 0.20%Oct 16, 2025
- UnknownAdobe experience_manager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.92%Oct 16, 2025
- Medium5.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 1.55%Oct 15, 2025
- High8.7When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
Sort