Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/Check if you run itEPSS 0.14%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Cross Site Request Forgery.This issue affects Sendle Shipping: fromCheck if you run itEPSS 0.14%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video:Check if you run itEPSS 0.14%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in TangibleWP Vehica Core vehica-core allows Cross Site Request Forgery.This issue affects Vehica Core: from n/a through <= 1.0.100.Check if you run itEPSS 0.14%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in instapagedev Instapage Plugin instapage allows Cross Site Request Forgery.This issue affects Instapage Plugin: from n/a through <Check if you run itEPSS 0.14%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in grooni Groovy Menu groovy-menu-free allows Cross Site Request Forgery.This issue affects Groovy Menu: from n/a through <= 1.4.3.Check if you run itEPSS 0.14%Sep 26, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <= 3.0.0.266.Check if you run itEPSS 0.19%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Shahjada Download Manager download-manager allows Cross Site Request Forgery.This issue affects Download Manager: from n/a througCheck if you run itEPSS 0.14%Sep 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Di Themes Di Themes Demo Site Importer di-themes-demo-site-importer allows Cross Site Request Forgery.This issue affects Di ThemeCheck if you run itEPSS 0.14%Sep 26, 2025
- Medium5.4The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request() function.Check if you run itEPSS 0.28%Sep 26, 2025
- Medium4.3The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20.Check if you run itEPSS 0.20%Sep 26, 2025
- Medium5.3The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8.Check if you run itEPSS 0.37%Sep 26, 2025
- Medium4.3The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12.Check if you run itEPSS 0.17%Sep 26, 2025
- Medium5.3A vulnerability was determined in YunaiV yudao-cloud up to 2025.09.Check if you run itEPSS 0.33%Sep 26, 2025
- High7.5An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST request to /user/existdirectory/1.Check if you run itEPSS 0.40%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.14%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.05%Sep 26, 2025
- High8.7All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" pCheck if you run itEPSS 0.32%Sep 25, 2025
- Critical9.5Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF).Check if you run itEPSS 0.83%Sep 25, 2025
- High7.5An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the SubscriptioCheck if you run itEPSS 0.42%Sep 25, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- Unknownusememos memos Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.08%Sep 25, 2025
- Medium5.3A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacCheck if you run itEPSS 0.20%Sep 24, 2025
- High7.7A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected deCheck if you run itEPSS 0.40%Sep 24, 2025
Sort