Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without priCheck if you run itEPSS 0.37%Jun 6, 2025
- High8.8An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote atCheck if you run itEPSS 0.39%Jun 6, 2025
- Critical9.9An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allowsCheck if you run itEPSS 0.52%Jun 6, 2025
- High8.7An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remoteCheck if you run itEPSS 0.45%Jun 6, 2025
- Critical9.9A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attacCheck if you run itEPSS 0.54%Jun 6, 2025
- Critical9.3A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remotCheck if you run itEPSS 0.51%Jun 6, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 6.42%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.76%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.76%Jun 6, 2025
- Critical9.8A missing protection against path traversal allows to access any file on the server.Check if you run itEPSS 0.62%Jun 6, 2025
- Critical10.0An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.Check if you run itEPSS 0.65%Jun 6, 2025
- Critical9.4A predefined administrative account is not documented and cannot be deactivated.Check if you run itEPSS 0.17%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.97%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical.Check if you run itEPSS 0.97%Jun 6, 2025
- Medium6.4The Paged Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 0.7 due to insufficieCheck if you run itEPSS 0.22%Jun 6, 2025
- Medium6.5The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient escaping on the userCheck if you run itEPSS 0.36%Jun 6, 2025
- Critical9.8The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the WPMDBUG_handle_settings() function in versions 1.0 to 1.1.0.Check if you run itEPSS 0.50%Jun 6, 2025
- Medium6.4The Freemind Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'freemind' shortcode in all versions up to, and including, 1.0 due to insuffiCheck if you run itEPSS 0.22%Jun 6, 2025
- Medium6.4The StageShow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘anchor’ parameter in all versions up to, and including, 10.0.3 due to insufficient input saCheck if you run itEPSS 0.25%Jun 6, 2025
- Medium5.5The Developer Formatter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2015.0.2.1 due to insufficient inCheck if you run itEPSS 0.29%Jun 6, 2025
- Medium6.4The WordPress Ajax Load More and Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.Check if you run itEPSS 0.28%Jun 6, 2025
- Medium5.4The Hive Support | AI-Powered Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inCheck if you run itEPSS 0.17%Jun 6, 2025
- Medium6.4The ESV Bible Shortcode for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'esv' shortcode in all versions up to, and including, 1.0.2Check if you run itEPSS 0.22%Jun 6, 2025
- Medium6.4The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcode in all versions up to, and including, 2.3.0 due to insuffiCheck if you run itEPSS 0.22%Jun 6, 2025
- Medium4.0Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.Check if you run itEPSS 0.11%Jun 6, 2025
Sort