Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.56%May 15, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421.Check if you run itEPSS 0.21%May 15, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium5.9There is an issue in CPython when using .Check if you run itEPSS 0.22%May 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Directory Management System 2.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium5.3A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0.Check if you run itEPSS 0.50%May 15, 2025
- Medium5.3A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0.Check if you run itEPSS 0.46%May 15, 2025
- Low2.0Insecure Direct Object Reference (IDOR) vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to acceCheck if you run itEPSS 0.34%May 15, 2025
- Critical9.8The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versioCheck if you run itEPSS 1.22%May 15, 2025
- Medium4.3Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to check the correct permissions which allows authenticated users who only have perCheck if you run itEPSS 0.26%May 15, 2025
- Medium5.8Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers toCheck if you run itEPSS 0.35%May 15, 2025
- Medium6.9Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier.Check if you run itEPSS 0.42%May 15, 2025
- Critical9.3Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 andCheck if you run itEPSS 1.58%May 15, 2025
- Medium6.2Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.Check if you run itEPSS 0.08%May 15, 2025
- Low3.9Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: fCheck if you run itEPSS 0.15%May 15, 2025
- Medium5.3Weak encryption vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 1Check if you run itEPSS 0.16%May 15, 2025
- High8.7XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 beforeCheck if you run itEPSS 0.39%May 15, 2025
- Medium6.8The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow usCheck if you run itEPSS 0.54%May 15, 2025
- High7.2The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5Check if you run itEPSS 0.90%May 15, 2025
- High8.8The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 viaCheck if you run itEPSS 1.12%May 15, 2025
- Medium6.4The Weluka Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'weluka-map' shortcode in all versions up to, and including, 1.0.3 due to insuffiCheck if you run itEPSS 0.24%May 15, 2025
- Medium6.4The EG-Series plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [series] shortcode in all versions up to, and including, 2.1.1 due to insufficientCheck if you run itEPSS 0.29%May 15, 2025
- Medium6.4The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficienCheck if you run itEPSS 0.24%May 15, 2025
- Critical9.8The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_remote_image_to_media_library funcCheck if you run itEPSS 0.92%May 15, 2025
Sort