Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component.Check if you run itEPSS 0.18%May 14, 2025
- Medium5.3The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1Check if you run itEPSS 0.35%May 14, 2025
- High8.1Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.Check if you run itEPSS 1.73%May 14, 2025
- High8.1Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.Check this weekEPSS 50.52%May 14, 2025
- Critical9.5Cap Collectif is an online decision making platform that integrates several tools.Check if you run itEPSS 0.72%May 14, 2025
- High7.5Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.Check if you run itEPSS 0.75%May 14, 2025
- High7.5Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver.Check if you run itEPSS 0.75%May 14, 2025
- Critical9.8Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB.Check if you run itEPSS 1.44%May 14, 2025
- High8.6Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).Check if you run itEPSS 0.35%May 14, 2025
- High8.7CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulateCheck if you run itEPSS 0.44%May 14, 2025
- Medium5.3The PeepSo Core: File Uploads plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.6.0 via the file_download REST API enCheck if you run itEPSS 0.29%May 14, 2025
- Medium5.5The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality.Check if you run itEPSS 0.25%May 14, 2025
- Medium6.3LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine.Check if you run itEPSS 0.30%May 14, 2025
- Medium5.4The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and inCheck if you run itEPSS 0.29%May 14, 2025
- Critical9.1The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automatCheck if you run itEPSS 0.87%May 14, 2025
- UnknownGoogle Chrome Loader Policy Enforcement VulnerabilityPatch nowKEVEPSS 5.43%May 14, 2025
- High7.5WS-WN572HP3 V230525 was discovered to contain a buffer overflow in the component /www/cgi-bin/upload.cgi.Check if you run itEPSS 0.48%May 14, 2025
- Medium5.4SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.Check if you run itEPSS 0.17%May 14, 2025
- Medium4.8SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and adCheck if you run itEPSS 0.27%May 14, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability was discovered in the Pichome system v2.1.0 and before.Check if you run itEPSS 0.24%May 14, 2025
- Critical9.8mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data.Check if you run itEPSS 0.97%May 14, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the userNamCheck if you run itEPSS 0.28%May 14, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtypeCheck if you run itEPSS 0.28%May 14, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the passworCheck if you run itEPSS 0.28%May 14, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title pCheck if you run itEPSS 0.28%May 14, 2025
Sort