Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issueCheck if you run itEPSS 0.38%Jul 3, 2025
- Medium6.5Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds ECheck if you run itEPSS 0.24%Jul 3, 2025
- Medium5.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - GoogleDocs4MW Extension allows Cross-SCheck if you run itEPSS 0.25%Jul 3, 2025
- Medium5.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Check if you run itEPSS 0.25%Jul 3, 2025
- High7.2The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_Check this weekEPSS 55.47%Jul 3, 2025
- High8.8The JKDEVKIT plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'font_upload_handler' function in all versions up to, andCheck if you run itEPSS 0.81%Jul 3, 2025
- Medium4.9n8n is a workflow automation platform.Check if you run itEPSS 0.47%Jul 3, 2025
- Medium5.4Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This isCheck if you run itEPSS 0.27%Jul 3, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issueCheck if you run itEPSS 0.19%Jul 3, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, thCheck if you run itEPSS 0.33%Jul 3, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, thCheck if you run itEPSS 0.33%Jul 3, 2025
- High7.6During startup, the device automatically logs in the EPC2 Windows user without requesting a password.Check if you run itEPSS 0.27%Jul 3, 2025
- High7.6The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker.Check if you run itEPSS 0.13%Jul 3, 2025
- Medium4.4The VNC application stores its passwords encrypted within the registry but uses DES for encryption.Check if you run itEPSS 0.24%Jul 3, 2025
- Medium6.5The VNC authentication mechanism bases on a challenge-response system where both server and client use the same password for encryption.Check if you run itEPSS 0.21%Jul 3, 2025
- Medium6.5All communication between the VNC server and client(s) is unencrypted.Check if you run itEPSS 0.29%Jul 3, 2025
- High7.5The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to bruteCheck if you run itEPSS 0.60%Jul 3, 2025
- Medium4.3The web application is vulnerable to clickjacking attacks.Check if you run itEPSS 0.34%Jul 3, 2025
- Medium4.3The application is vulnerable to cross-site request forgery.Check if you run itEPSS 0.21%Jul 3, 2025
- Medium5.3The HttpOnly flag is set to false on the PHPSESSION cookie.Check if you run itEPSS 0.43%Jul 3, 2025
- Medium5.3The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure.Check if you run itEPSS 0.45%Jul 3, 2025
- Medium5.3For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username.Check if you run itEPSS 0.43%Jul 3, 2025
- Medium6.5The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4.Check if you run itEPSS 0.30%Jul 3, 2025
- High7.5The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacksCheck if you run itEPSS 0.60%Jul 3, 2025
- Medium6.8The web application is susceptible to cross-site-scripting attacks.Check if you run itEPSS 0.32%Jul 3, 2025
Sort