Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions upCheck if you run itEPSS 0.29%Oct 25, 2025
- Medium6.4The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_eCheck if you run itEPSS 0.22%Oct 25, 2025
- Medium5.3The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and incluCheck if you run itEPSS 0.31%Oct 25, 2025
- High7.0Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity.Check if you run itEPSS 0.13%Oct 24, 2025
- High7.0Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.Check if you run itEPSS 0.21%Oct 24, 2025
- High7.0Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and useCheck if you run itEPSS 0.15%Oct 24, 2025
- High8.9An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and versionCheck if you run itEPSS 0.32%Oct 24, 2025
- High8.6GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API.Check if you run itEPSS 0.42%Oct 24, 2025
- Critical9.8D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.Check if you run itEPSS 0.41%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery.Check if you run itEPSS 0.46%Oct 24, 2025
- High7.5Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft SoftCheck if you run itEPSS 0.34%Oct 24, 2025
- Medium6.2An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain sensitive information via the plaintext storage of passwords and usernames.Check if you run itEPSS 0.14%Oct 24, 2025
- Critical9.8Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability.Check if you run itEPSS 0.84%Oct 24, 2025
- Medium6.5Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability.Check if you run itEPSS 0.33%Oct 24, 2025
- Medium4.3The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5.Check if you run itEPSS 0.29%Oct 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhost_task.Check if you run itEPSS 0.15%Oct 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read BMG_PCIE_CAP(0x138340) register nCheck if you run itEPSS 0.18%Oct 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concCheck if you run itEPSS 0.24%Oct 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatiCheck if you run itEPSS 0.21%Oct 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used forCheck if you run itEPSS 0.21%Oct 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aeCheck if you run itEPSS 0.29%Oct 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregistCheck if you run itEPSS 0.15%Oct 24, 2025
Sort