Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product.Check if you run itEPSS 0.16%Apr 19, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0.Check if you run itEPSS 0.53%Apr 18, 2025
- Medium6.5Dify is an open-source LLM app development platform.Check if you run itEPSS 0.43%Apr 18, 2025
- Medium6.5Dify is an open-source LLM app development platform.Check if you run itEPSS 0.30%Apr 18, 2025
- High7.3NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.46%Apr 18, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3.Check if you run itEPSS 0.66%Apr 18, 2025
- Medium6.3Dify is an open-source LLM app development platform.Check if you run itEPSS 0.29%Apr 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() The pynfs DELEG8 test fails when run agaCheck if you run itEPSS 0.62%Apr 18, 2025
- Medium4.8The MapPress Maps for WordPress plugin before 2.94.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrosCheck if you run itEPSS 0.40%Apr 18, 2025
- Medium4.4The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom logo and background URCheck if you run itEPSS 0.24%Apr 18, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.Check this weekEPSS 42.83%Apr 18, 2025
- High7.5An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to accCheck if you run itEPSS 0.40%Apr 18, 2025
- Critical9.1Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication.Check if you run itEPSS 0.61%Apr 18, 2025
- Critical9.1Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.Check if you run itEPSS 0.45%Apr 18, 2025
- Critical9.1Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials.Check if you run itEPSS 0.55%Apr 18, 2025
- Critical9.8Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges.Check if you run itEPSS 0.79%Apr 18, 2025
- High7.5An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale tokenCheck if you run itEPSS 0.83%Apr 18, 2025
- Medium6.374cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.Check if you run itEPSS 0.59%Apr 18, 2025
- High7.1A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionaCheck if you run itEPSS 1.31%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affectCheck if you run itEPSS 0.29%Apr 17, 2025
- High7.1Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.Check if you run itEPSS 0.29%Apr 17, 2025
- Medium5.3The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 1.42.0 via the 'hanCheck if you run itEPSS 0.22%Apr 17, 2025
- Low3.5The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrossCheck if you run itEPSS 0.27%Apr 17, 2025
- Low3.5The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrossCheck if you run itEPSS 0.27%Apr 17, 2025
- Low3.5The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrossCheck if you run itEPSS 0.27%Apr 17, 2025
Sort