Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1An OpenSSH daemon listens on TCP port 22.Check if you run itEPSS 0.57%May 21, 2025
- Medium6.2A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files.Check if you run itEPSS 0.22%May 21, 2025
- Medium6.5There are several scripts in the web interface that are accessible via undocumented hard-coded credentials.Check if you run itEPSS 0.35%May 21, 2025
- High7.7The and files reveal hard-coded password hashes for the operating system "root" user.Check if you run itEPSS 0.23%May 21, 2025
- Medium6.5Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script.Check if you run itEPSS 1.01%May 21, 2025
- Medium6.5The devices do not implement any authentication for the web interface or the MQTT server.Check if you run itEPSS 0.45%May 21, 2025
- Medium5.1A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Device Management), as well as details of the devices like theiCheck if you run itEPSS 0.21%May 21, 2025
- Critical9.1Spring Security Aspects may not correctly locate method security annotations on private methods.Check if you run itEPSS 0.62%May 21, 2025
- Medium6.4The Animated Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-downloader' shortcode in all versions up to, and including, 1.0.0 dueCheck if you run itEPSS 0.25%May 21, 2025
- Medium6.4The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ib_youtube' shortcode in all versions up to, and including, 1.2 dCheck if you run itEPSS 0.25%May 21, 2025
- Medium6.4The Network Posts Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_height’ parameter in all versions up to, and including, 7.7.1 due to insuCheck if you run itEPSS 0.31%May 21, 2025
- Medium6.4The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slim_seo_breadcrumbs shortcode in all versioCheck if you run itEPSS 0.53%May 21, 2025
- Medium5.4The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gatewayCheck if you run itEPSS 0.29%May 21, 2025
- High7.2The Glossary by WPPedia – Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.0 via deserializatCheck if you run itEPSS 0.74%May 21, 2025
- Medium6.4The Raisely Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's raisely_donation_form shortcode in all versions up to, and including, 1Check if you run itEPSS 0.32%May 21, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityPatch nowKEVEPSS 93.31%May 21, 2025
- High8.7Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary filesCheck if you run itEPSS 0.83%May 21, 2025
- High8.2Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.Check if you run itEPSS 0.90%May 21, 2025
- Medium6.9Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.Check if you run itEPSS 0.46%May 21, 2025
- High8.3Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.Check if you run itEPSS 0.82%May 21, 2025
- High8.2Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.Check if you run itEPSS 0.56%May 21, 2025
- Medium6.8In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git trCheck if you run itEPSS 0.84%May 21, 2025
- Critical9.8The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to brutefoCheck this weekEPSS 16.43%May 21, 2025
- Medium6.5A vulnerability was found in the libsoup package.Check if you run itEPSS 0.91%May 21, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702.Check if you run itEPSS 0.71%May 21, 2025
Sort