Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says.Check if you run itEPSS 0.52%Sep 12, 2025
- High7.51.Check if you run itEPSS 1.46%Sep 12, 2025
- Medium6.9A vulnerability was found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40.Check if you run itEPSS 0.44%Sep 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated usersCheck if you run itEPSS 0.49%Sep 12, 2025
- Low2.3A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40.Check if you run itEPSS 0.25%Sep 12, 2025
- Medium5.3A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09.Check if you run itEPSS 0.31%Sep 12, 2025
- Medium6.1The Ultimate Blogroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.15%Sep 12, 2025
- Medium6.4The Embed Google Datastudio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'egds' shortcode in all versions up to, and including, 1.0.0 due to iCheck if you run itEPSS 0.20%Sep 12, 2025
- Medium6.1The Side Slide Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%Sep 12, 2025
- Medium6.4The Spotify Embed Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotify' shortcode in all versions up to, and including, 1.0.5 due toCheck if you run itEPSS 0.20%Sep 12, 2025
- Medium5.3A vulnerability was detected in YunaiV yudao-cloud up to 2025.09.Check if you run itEPSS 0.31%Sep 12, 2025
- High7.5The Spirit Framework plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.13.Check if you run itEPSS 0.71%Sep 12, 2025
- Medium5.3The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.4 update 81 through update 85 does not check user permissionCheck if you run itEPSS 0.27%Sep 12, 2025
- Medium5.3A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09.Check if you run itEPSS 0.31%Sep 12, 2025
- Low1.0JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi are registered and invoked direCheck if you run itEPSS 0.22%Sep 12, 2025
- High7.5StellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.35%Sep 12, 2025
- High7.5Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.20%Sep 12, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.58%Sep 12, 2025
- Medium5.3A weakness has been identified in YunaiV yudao-cloud up to 2025.09.Check if you run itEPSS 0.30%Sep 12, 2025
- High8.8Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.95%Sep 12, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 12, 2025
- Medium5.3A security flaw has been discovered in erjinzhi 10OA 1.0.Check if you run itEPSS 0.36%Sep 12, 2025
- High8.0An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default passwordCheck if you run itEPSS 0.61%Sep 12, 2025
- High8.0An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default passwordCheck if you run itEPSS 0.46%Sep 12, 2025
- High8.0An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password.Check if you run itEPSS 0.59%Sep 12, 2025
Sort