Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure (BBMRI-ERIC).Check if you run itEPSS 0.26%Oct 7, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure (BBMRI-ERIC), consisting of a stored XSS due to a lCheck if you run itEPSS 0.36%Oct 7, 2025
- Medium5.1KUNO CMS is a fully deployable full-stack blog application.Check if you run itEPSS 0.34%Oct 6, 2025
- Medium5.3Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.Check if you run itEPSS 0.40%Oct 6, 2025
- Medium5.3In the HTTP request, the username and password are transferred directly in the URL as parameters.Check if you run itEPSS 0.39%Oct 6, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.08%Oct 6, 2025
- High8.0Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cCheck if you run itEPSS 0.20%Oct 6, 2025
- UnknownCisco IOS XR Heap-based Buffer OverflowPatch nowKEVEPSS 6.92%Oct 6, 2025
- Medium5.3A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0.Check if you run itEPSS 0.42%Oct 5, 2025
- Medium5.1A vulnerability was determined in samanhappy MCPHub up to 0.9.10.Check if you run itEPSS 0.31%Oct 5, 2025
- Medium6.3A flaw has been found in Frappe LMS 2.35.0.Check if you run itEPSS 0.48%Oct 5, 2025
- Medium5.3A vulnerability has been found in SeriaWei ZKEACMS up to 4.3.Check if you run itEPSS 0.29%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed" The "atomic_inc(&cmd->Check if you run itEPSS 0.14%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drbd: only clone bio if we have a backing device Commit c347a787e34cb (drbd: set ->bi_bdev in drbd_req_new) moveCheck if you run itEPSS 0.14%Oct 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stackCheck if you run itEPSS 0.24%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible uaf for 'bfqq->bic' Our test report a uaf for 'bfqq->bic' in 5.10: ====================Check if you run itEPSS 0.17%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmwareCheck if you run itEPSS 0.16%Oct 4, 2025
- Medium4.3The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includiCheck if you run itEPSS 0.20%Oct 4, 2025
- Medium6.5The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.27%Oct 4, 2025
- Medium4.3The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium4.3The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium4.3The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium4.3The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.17%Oct 3, 2025
- Medium4.3The WP SinoType plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%Oct 3, 2025
- Medium4.3The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11.Check if you run itEPSS 0.20%Oct 3, 2025
Sort