Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.Check if you run itEPSS 0.14%Oct 15, 2025
- Medium6.4The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sCheck if you run itEPSS 0.23%Oct 15, 2025
- High7.3The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includingCheck if you run itEPSS 0.23%Oct 15, 2025
- Medium4.3The Quick Featured Images plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 13.7.2 via the qfi_set_thumbnail and qfi_deleCheck if you run itEPSS 0.24%Oct 15, 2025
- Medium5.7In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority.Check if you run itEPSS 0.17%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 15, 2025
- High8.8The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theet_ajax_required_plugins_popup() function.Check if you run itEPSS 0.72%Oct 15, 2025
- Critical9.2Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function copies characters from an input strinCheck if you run itEPSS 0.69%Oct 15, 2025
- Critical9.3DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumCheck if you run itEPSS 0.69%Oct 15, 2025
- High7.8Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current usCheck if you run itEPSS 0.27%Oct 15, 2025
- Medium5.5Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure.Check if you run itEPSS 0.24%Oct 15, 2025
- High7.8Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the currentCheck if you run itEPSS 0.27%Oct 15, 2025
- High7.8Animate versions 23.0.13, 24.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.25%Oct 15, 2025
- Medium5.5Animate versions 23.0.13, 24.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.22%Oct 15, 2025
- Medium5.5Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to memory exposure.Check if you run itEPSS 0.22%Oct 15, 2025
- Critical9.4Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing.Check if you run itEPSS 0.47%Oct 15, 2025
- Medium6.4Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guCheck if you run itEPSS 0.22%Oct 15, 2025
Sort