Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' fCheck if you run itEPSS 0.37%Sep 19, 2025
- Low2.1A weakness has been identified in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.41%Sep 19, 2025
- Medium6.9A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0.Check if you run itEPSS 0.97%Sep 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC -Check if you run itEPSS 0.26%Sep 19, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Beyaz Computer CityPlus allows Path Traversal.Check if you run itEPSS 0.45%Sep 19, 2025
- Medium5.3Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to accessCheck if you run itEPSS 0.28%Sep 19, 2025
- Medium4.3Grafana is an open-source platform for monitoring and observability.Check if you run itEPSS 0.36%Sep 19, 2025
- Medium6.8Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCCheck if you run itEPSS 1.02%Sep 19, 2025
- High8.8The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_handler_download_pdf_media function in all veCheck if you run itEPSS 0.88%Sep 19, 2025
- High7.3The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.Check if you run itEPSS 0.22%Sep 19, 2025
- High8.6The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.Check if you run itEPSS 0.20%Sep 19, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd.Check if you run itEPSS 0.23%Sep 19, 2025
- Critical9.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.42%Sep 19, 2025
- High7.1A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT).Check if you run itEPSS 0.21%Sep 19, 2025
- High7.6Parameters are not validated or sanitized, and are later used in various internal operations.Check if you run itEPSS 0.21%Sep 19, 2025
- High7.6Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero.Check if you run itEPSS 0.21%Sep 19, 2025
- Medium4.3The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request.Check if you run itEPSS 0.40%Sep 19, 2025
- High8.1The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0.Check if you run itEPSS 0.43%Sep 19, 2025
- Medium6.1The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_ids’ parameter in all versions up to, and including, 3.3.23 due to insufficiCheck if you run itEPSS 0.22%Sep 19, 2025
- Medium5.4The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX actionCheck if you run itEPSS 0.27%Sep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
Sort