Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypass.Check if you run itEPSS 0.35%Sep 3, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft LimonDesk allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.24%Sep 3, 2025
- High7.3Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.Check if you run itEPSS 0.15%Sep 3, 2025
- Medium4.3Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking.Check if you run itEPSS 0.18%Sep 3, 2025
- High7.8netfilter: nf_tables: reject duplicate device on updatesCheck if you run itEPSS 0.28%Sep 3, 2025
- Medium4.3Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting Incorrectly Configured Access Control Security Levels.ThisCheck if you run itEPSS 0.22%Sep 3, 2025
- High8.8Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects ExperieCheck if you run itEPSS 1.64%Sep 3, 2025
- Critical9.8Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allCheck this weekEPSS 19.93%Sep 3, 2025
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects SitecoreCheck if you run itEPSS 6.72%Sep 3, 2025
- Medium5.9A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses.Check if you run itEPSS 0.45%Sep 3, 2025
- Low2.1Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London.Check if you run itEPSS 0.33%Sep 3, 2025
- Low2.7SummaryUsers with webhook permissions can conduct SSRF via webhooks.Check if you run itEPSS 0.30%Sep 3, 2025
- High8.6Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass.Check if you run itEPSS 0.35%Sep 3, 2025
- Critical9.8Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force.Check if you run itEPSS 0.45%Sep 3, 2025
- Medium6.3Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding.Check if you run itEPSS 0.20%Sep 3, 2025
- Medium4.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.19%Sep 3, 2025
- High7.5The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager loading of request bodies in the Request class constructor.Check if you run itEPSS 0.45%Sep 3, 2025
- Medium6.8Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing.Check if you run itEPSS 0.21%Sep 3, 2025
- Medium4.3The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerCheck if you run itEPSS 0.25%Sep 3, 2025
- Medium5.3Missing Authorization vulnerability in ThemeMove Makeaholic makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from nCheck if you run itEPSS 0.25%Sep 3, 2025
- Critical9.8Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes realhomes allows Privilege Escalation.This issue affects RealHomes: from n/a through <= 4.3.6.Check if you run itEPSS 0.69%Sep 3, 2025
- Medium6.4The Vayu Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attributes in the Lottie block in all versionsCheck if you run itEPSS 0.24%Sep 3, 2025
- Medium4.6Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profCheck if you run itEPSS 0.22%Sep 3, 2025
- Medium4.0Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.14%Sep 3, 2025
- Medium4.3Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary applicaCheck if you run itEPSS 0.16%Sep 3, 2025
Sort