Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.76%Apr 15, 2025
- Critical10.0Argo Events is an event-driven workflow automation framework for Kubernetes.Check if you run itEPSS 0.79%Apr 15, 2025
- Critical9.8Dpanel is a Docker visualization panel system which provides complete Docker management functions.Check if you run itEPSS 0.90%Apr 15, 2025
- High8.8Missing Authorization vulnerability in Quý Lê 91 Administrator Z administrator-z allows Privilege Escalation.This issue affects Administrator Z: from n/a through <= 2025.03.24.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium4.8The Simple Social Media Share Buttons WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfoCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium4.8The Widget for Social Page Feeds WordPress plugin before 6.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium4.9The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and including, 2.4.6 due toCheck if you run itEPSS 0.41%Apr 15, 2025
- High7.2A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron SMP 111 <=3.01, SMP 351 <=2.16, SMP 352 <= 2.16, and SME 211 <= 3.02, allows a remoCheck if you run itEPSS 2.39%Apr 15, 2025
- UnknownSureTriggers suretriggers Incorrect ComparisonPatch nowKEVEPSS 76.24%Apr 9, 2025
- Unknowneset internet_security Uncontrolled Search Path ElementPatch nowKEVEPSS 2.07%Apr 7, 2025
- Critical9.8WooCommerce Order Delivery Date Pro Unauthenticated Arbitrary Option Update VulnerabilityPatch nowKEVEPSS 1.39%Apr 4, 2025
- Unknownuncannyowl uncanny_automator Missing AuthorizationPatch nowKEVEPSS 2.70%Apr 4, 2025
- Critical9.8Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityPatch nowKEVEPSS 94.34%Apr 3, 2025
- UnknownUser Registration & Membership WordPress Plugin Membership Addon Privilege EscalationPatch nowKEVEPSS 49.08%Mar 25, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 97.17%Mar 24, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 74.06%Mar 24, 2025
- Unknownunitecms unlimited_addons_for_wpbakery_page_builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.48%Mar 19, 2025
- Unknownsfwebservice injob Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.50%Mar 7, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.43%Mar 5, 2025
- Medium6.0VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityPatch nowKEVEPSS 1.77%Mar 4, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 1.56%Mar 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero The following problem was encountered during stabil…Check if you run itEPSS 0.23%Feb 27, 2025
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- UnknownFour-Faith F3x36 Router bapply.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.67%Feb 9, 2025
Sort