Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Parameters are not validated or sanitized, and are later used in various internal operations.Check if you run itEPSS 0.21%Sep 19, 2025
- High7.6Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero.Check if you run itEPSS 0.21%Sep 19, 2025
- Medium4.3The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request.Check if you run itEPSS 0.40%Sep 19, 2025
- High8.1The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0.Check if you run itEPSS 0.45%Sep 19, 2025
- Medium6.1The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_ids’ parameter in all versions up to, and including, 3.3.23 due to insufficiCheck if you run itEPSS 0.22%Sep 19, 2025
- Medium5.4The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX actionCheck if you run itEPSS 0.27%Sep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- None0.0Not usedOpen the advisorySep 19, 2025
- Medium5.4SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.Check if you run itEPSS 0.19%Sep 19, 2025
- Critical9.8The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplus_import_pack_iCheck if you run itEPSS 0.78%Sep 19, 2025
- High7.2There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW .Check if you run itEPSS 0.31%Sep 19, 2025
- High7.2There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F .Check if you run itEPSS 0.32%Sep 19, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.96%Sep 19, 2025
- Medium6.5Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation.Check if you run itEPSS 0.24%Sep 19, 2025
- Medium6.1Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.Check if you run itEPSS 0.27%Sep 19, 2025
- High8.8Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.Check if you run itEPSS 0.61%Sep 19, 2025
- High8.0An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.Check if you run itEPSS 0.33%Sep 19, 2025
- High8.8Hardcoded credentials in default configuration of PPress 0.0.9.Check if you run itEPSS 0.42%Sep 19, 2025
Sort