Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shorCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium6.4The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium5.3A vulnerability was found in ChestnutCMS up to 15.1.Check if you run itEPSS 0.50%Jun 4, 2025
- Medium6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.Check if you run itEPSS 0.40%Jun 4, 2025
- Medium6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.Check if you run itEPSS 0.37%Jun 4, 2025
- Medium6.5Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.Check if you run itEPSS 0.29%Jun 4, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.95%Jun 4, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400.Check if you run itEPSS 0.24%Jun 4, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor Exynos 1380.Check if you run itEPSS 0.24%Jun 4, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400.Check if you run itEPSS 0.24%Jun 4, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400.Check if you run itEPSS 0.24%Jun 4, 2025
- UnknownTiagorlampert CHAOS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.10%Jun 4, 2025
- High8.2dataease dataease Authentication Bypass by SpoofingPatch nowKEVEPSS 49.98%Jun 3, 2025
- Medium6.3A vulnerability was found in Jrohy trojan up to 2.15.3.Check if you run itEPSS 2.77%Jun 3, 2025
- Medium5.1A vulnerability classified as problematic has been found in enilu web-flash 1.0.Check if you run itEPSS 0.31%Jun 3, 2025
- Medium6.9Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language.Check if you run itEPSS 0.75%Jun 3, 2025
- Medium6.9A vulnerability was found in jack0240 魏 bskms 蓝天幼儿园管理系统 up to dffe6640b5b54d8e29da6f060e0493fea74b3fad.Check if you run itEPSS 0.41%Jun 3, 2025
- Medium5.3A vulnerability was found in WuKongOpenSource WukongCRM 9.0.Check if you run itEPSS 0.31%Jun 3, 2025
- High7.3DataEase is an open source business intelligence and data visualization tool.Check if you run itEPSS 0.50%Jun 3, 2025
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.44%Jun 3, 2025
- Medium5.5Umbraco is an ASP.NET content management system (CMS).Check if you run itEPSS 0.18%Jun 3, 2025
- Medium5.8MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.45%Jun 3, 2025
- Medium6.9A vulnerability was found in Open5GS up to 2.7.3.Check if you run itEPSS 0.85%Jun 3, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108.Check if you run itEPSS 0.36%Jun 3, 2025
- Medium6.5webpack-dev-server allows users to use webpack with a development server that provides live reloading.Check if you run itEPSS 0.34%Jun 3, 2025
Sort