Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site ScriCheck if you run itEPSS 0.23%Sep 22, 2025
- Medium4.7The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow usersCheck if you run itEPSS 0.23%Sep 22, 2025
- Medium5.6The Etsy Shop WordPress plugin before 3.0.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-SitCheck if you run itEPSS 0.20%Sep 22, 2025
- Medium6.9A security vulnerability has been detected in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.55%Sep 22, 2025
- Medium6.9A weakness has been identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium6.9A security flaw has been discovered in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium5.3A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0.Check if you run itEPSS 0.34%Sep 22, 2025
- High8.7A vulnerability was found in D-Link DCS-935L up to 1.13.01.Check if you run itEPSS 0.91%Sep 22, 2025
- Low2.3A vulnerability has been found in Smartstore up to 6.2.0.Check if you run itEPSS 0.25%Sep 22, 2025
- Medium5.3A flaw has been found in JSC R7 R7-Office Document Server up to 20250820.Check if you run itEPSS 0.43%Sep 22, 2025
- Medium6.3A vulnerability was detected in LionCoders SalePro POS up to 5.5.0.Check if you run itEPSS 0.25%Sep 22, 2025
- Medium5.1A security vulnerability has been detected in Wavlink WL-NU516U1 240425.Check this weekEPSS 20.02%Sep 22, 2025
- Medium5.1A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117.Check if you run itEPSS 3.98%Sep 22, 2025
- Medium4.3In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked.Check if you run itEPSS 0.20%Sep 22, 2025
- Medium4.3In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8.Check if you run itEPSS 0.18%Sep 22, 2025
- Medium5.8Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane paCheck if you run itEPSS 0.27%Sep 22, 2025
- High8.8The LB-Link routers, including the BL-AC2100_AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000_AE4 v2.4.9, BL-AC1900_AZ2 v1.0.2, BL-X26_AC8 v1.2.8, and BL-LTE300_DA4 V1.2.3 models, are vulneCheck if you run itEPSS 1.17%Sep 22, 2025
- Medium6.5Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution viaCheck if you run itEPSS 0.71%Sep 22, 2025
- High8.8Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to elevate their privileges by assigning themselves as adminCheck if you run itEPSS 0.30%Sep 22, 2025
- Critical9.8Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authCheck if you run itEPSS 0.53%Sep 22, 2025
- Critical9.8AiKaan Cloud Controller uses a single hardcoded SSH private key and the username for remote terminal access to all managed IoT/edge devices.Check if you run itEPSS 0.42%Sep 22, 2025
- Critical9.8The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990.Check if you run itEPSS 0.55%Sep 22, 2025
- High7.5The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which accepts unauthenticated plaintext commands for controlling streaming, recording, forCheck if you run itEPSS 0.28%Sep 22, 2025
- High8.8Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint.Check if you run itEPSS 0.83%Sep 22, 2025
Sort