Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 4.72%Sep 9, 2025
- Medium4.8Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.Check if you run itEPSS 3.12%Sep 9, 2025
- High7.0Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.38%Sep 9, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Sep 9, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Sep 9, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Sep 9, 2025
- Medium6.5Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Sep 9, 2025
- Medium6.5Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Sep 9, 2025
- High7.0Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Sep 9, 2025
- Medium4.3Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control SecuCheck if you run itEPSS 0.21%Sep 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Request Forgery.This issue affects Advanced Settings: from n/aCheck if you run itEPSS 0.12%Sep 9, 2025
- Medium5.3Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.24%Sep 9, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Rhys Wynne WP eBay Product Feeds ebay-feeds-for-wordpress allows Server Side Request Forgery.This issue affects WP eBay ProductCheck if you run itEPSS 0.15%Sep 9, 2025
- Medium5.3Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through <Check if you run itEPSS 0.22%Sep 9, 2025
- Medium5.4Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control SecuCheck if you run itEPSS 0.17%Sep 9, 2025
- Medium5.3Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This iCheck if you run itEPSS 0.23%Sep 9, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixeline Pixeline's Email Protector pixelines-email-protector allows Stored XSCheck if you run itEPSS 0.18%Sep 9, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affectCheck if you run itEPSS 0.18%Sep 9, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Include Me include-me allows Stored XSS.This issue affects IncluCheck if you run itEPSS 0.18%Sep 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce product-tabs-for-woocCheck if you run itEPSS 0.17%Sep 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects FootCheck if you run itEPSS 0.17%Sep 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My TickeCheck if you run itEPSS 0.17%Sep 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silverplugins217 Dynamic Text Field For Contact Form 7 dynamic-text-field-for-Check if you run itEPSS 0.17%Sep 9, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS.Check if you run itEPSS 0.11%Sep 9, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: froCheck if you run itEPSS 0.28%Sep 9, 2025
Sort