Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device.Check if you run itEPSS 0.32%Aug 14, 2025
- Low3.8Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerability.Check if you run itEPSS 0.14%Aug 14, 2025
- High8.5A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations.Check if you run itEPSS 0.14%Aug 14, 2025
- High8.8A security issue exists within the 5032 16pt Digital Configurable module’s web server.Check if you run itEPSS 0.41%Aug 14, 2025
- High8.8A security issue exists within the 5032 16pt Digital Configurable module’s web server.Check if you run itEPSS 0.41%Aug 14, 2025
- High8.5A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token.Check if you run itEPSS 0.16%Aug 14, 2025
- Medium5.3A vulnerability was determined in jeecgboot JimuReport up to 2.1.1.Check if you run itEPSS 0.51%Aug 14, 2025
- Low3.1PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access.Check if you run itEPSS 0.24%Aug 14, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0.Check if you run itEPSS 0.52%Aug 14, 2025
- High8.7A vulnerability was identified in Tenda TX3 16.03.13.11_multi_TDE01.Check if you run itEPSS 0.80%Aug 14, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolboCheck if you run itEPSS 0.61%Aug 14, 2025
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T.Check if you run itEPSS 0.43%Aug 14, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wproyal News Magazine X news-magazine-x allows PHP Local FiCheck if you run itEPSS 0.56%Aug 14, 2025
- Critical10.0Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 BeeTeam368 Extensions beeteam368-extensions alloCheck if you run itEPSS 0.52%Aug 14, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidMov vidmov allows PHP Local File Inclusion.ThCheck if you run itEPSS 0.65%Aug 14, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Alike - WordPress Custom Post Comparison alike allows Reflected XSS.TCheck if you run itEPSS 0.23%Aug 14, 2025
- Medium6.5Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics allows Exploiting Incorrectly Configured Access Control SecCheck if you run itEPSS 0.31%Aug 14, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion.Check if you run itEPSS 0.47%Aug 14, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt WooCommerce Shop Page Builder allows Reflected XSS.Check if you run itEPSS 0.23%Aug 14, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward pressforward allows Server Side Request Forgery.This issue affects PressForward: from n/a through <= 5Check if you run itEPSS 0.22%Aug 14, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt FoodMenu allows Reflected XSS.Check if you run itEPSS 0.23%Aug 14, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File ICheck if you run itEPSS 0.56%Aug 14, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbg_vpCheck if you run itEPSS 0.24%Aug 14, 2025
- Medium6.5Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control SeCheck if you run itEPSS 0.32%Aug 14, 2025
- High7.5Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: frCheck if you run itEPSS 0.30%Aug 14, 2025
Sort