Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)Check if you run itEPSS 0.40%Sep 24, 2025
- High7.5Transient DOS while processing power control requests with invalid antenna or stream values.Check if you run itEPSS 0.22%Sep 24, 2025
- Medium6.3Http4s is a Scala interface for HTTP services.Check if you run itEPSS 0.37%Sep 23, 2025
- Medium5.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.26%Sep 23, 2025
- Critical9.8The WPCasa plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.4.1.Check if you run itEPSS 0.82%Sep 23, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue afCheck if you run itEPSS 0.17%Sep 23, 2025
- Medium4.3SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc.Check if you run itEPSS 0.22%Sep 23, 2025
- High8.7A vulnerability was identified in Tenda AC20 up to 16.03.08.12.Check if you run itEPSS 0.85%Sep 22, 2025
- Medium5.4When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended.Check if you run itEPSS 0.33%Sep 22, 2025
- High7.5Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 5.20%Sep 22, 2025
- Medium6.9A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.38%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System wp-attractive-donations-system-easy-stripe-paypal-donations allows Stored XSS.This issue afCheck if you run itEPSS 0.13%Sep 22, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio publitio allows Server Side Request Forgery.This issue affects Publitio: from n/a through <= 2.2.1.Check if you run itEPSS 0.22%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Zoho Flow Zoho Flow zoho-flow allows Cross Site Request Forgery.This issue affects Zoho Flow: from n/a through <= 2.14.1.Check if you run itEPSS 0.14%Sep 22, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Cross Site Request Forgery.This issue affects WorkScout-Core: from n/a through <Check if you run itEPSS 0.17%Sep 22, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in mihdan Mihdan: No External Links mihdan-no-external-links allows Cross Site Request Forgery.This issue affects Mihdan: No ExternaCheck if you run itEPSS 0.17%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in activewebsight SEO Backlink Monitor seo-backlink-monitor allows Cross Site Request Forgery.This issue affects SEO Backlink MonitoCheck if you run itEPSS 0.17%Sep 22, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in activewebsight SEO Backlink Monitor seo-backlink-monitor allows Server Side Request Forgery.This issue affects SEO Backlink MoniCheck if you run itEPSS 0.28%Sep 22, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in Binsaifullah Beaf image-compare-block allows Server Side Request Forgery.This issue affects Beaf: from n/a through <= 1.6.2.Check if you run itEPSS 0.25%Sep 22, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Md Taufiqur Rahman RIS Version Switcher – Downgrade or Upgrade WP Versions Easily ris-version-switcher allows Cross Site RequestCheck if you run itEPSS 0.20%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Amin Y AgreeMe Checkboxes For WooCommerce agreeme-checkboxes-for-woocommerce allows Cross Site Request Forgery.This issue affectsCheck if you run itEPSS 0.17%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in César Martín TOCHAT.BE tochat-be allows Cross Site Request Forgery.This issue affects TOCHAT.BE: from n/a through <= 1.3.4.Check if you run itEPSS 0.16%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Cross Site Request Forgery.This issue affects DelCheck if you run itEPSS 0.16%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ERA404 LinkedInclude linkedinclude allows Stored XSS.This issue affects LinkedInclude: from n/a through <= 3.0.4.Check if you run itEPSS 0.14%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Automattic Developer allows Cross Site Request Forgery.Check if you run itEPSS 0.16%Sep 22, 2025
Sort