Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report tCheck if you run itEPSS 0.52%Jun 6, 2025
- High8.0Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resultingCheck if you run itEPSS 0.54%Jun 6, 2025
- High7.1A flaw was found in the user's crate for Rust.Check if you run itEPSS 0.20%Jun 6, 2025
- Medium4.9A flaw was found in Samba.Check if you run itEPSS 0.75%Jun 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC cCheck if you run itEPSS 0.23%Jun 6, 2025
- Medium5.3A vulnerability was found in code-projects Laundry System 1.0.Check if you run itEPSS 0.27%Jun 6, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in choicehomemortgage AI Mortgage Calculator allows PHP LocalCheck if you run itEPSS 0.76%Jun 6, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hanhdo205 Bang tinh vay allows Stored XSS.Check if you run itEPSS 0.26%Jun 6, 2025
- Medium6.5Missing Authorization vulnerability in SolaPlugins Sola Support Ticket allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.33%Jun 6, 2025
- Medium4.3Missing Authorization vulnerability in 6Storage 6Storage Rentals allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.28%Jun 6, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marchetti Design Next Event Calendar allows Stored XSS.Check if you run itEPSS 0.26%Jun 6, 2025
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Retrieve Embedded SenCheck if you run itEPSS 0.36%Jun 6, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP Post Corrector allows SQL Injection.Check if you run itEPSS 0.42%Jun 6, 2025
- Medium5.4Missing Authorization vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Exploiting Incorrectly Configured Access Control Security Levels.This issuCheck if you run itEPSS 0.32%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Exploiting Incorrectly Configured Access Control Security Levels.This issuCheck if you run itEPSS 0.32%Jun 6, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows Cross Site Request Forgery.This issue affects Pay with Contact FoCheck if you run itEPSS 0.15%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects bbPress API: froCheck if you run itEPSS 0.34%Jun 6, 2025
- Medium5.4Missing Authorization vulnerability in De paragon No Spam At All no-spam-at-all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects No Spam ACheck if you run itEPSS 0.32%Jun 6, 2025
- Medium5.4Missing Authorization vulnerability in codelobster Responsive Flipbooks responsive-flipbooks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.32%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Cross Site Request Forgery.This issueCheck if you run itEPSS 0.18%Jun 6, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nir Complete Google Seo Scan complete-google-seo-scan allows SQL Injection.ThiCheck if you run itEPSS 0.42%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Media File Type Manager wp-media-file-type-manager allows Cross Site Request Forgery.This issue affects WP Media File TCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ángel C.Check if you run itEPSS 0.26%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue affects Post Author: from n/a through <= 1.1.1.Check if you run itEPSS 0.15%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected XSS.Check if you run itEPSS 0.14%Jun 6, 2025
Sort