Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5scripteo ads_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.37%Jul 2, 2025
- Medium6.1The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmp_reset_password_token parameters in all versions up tCheck if you run itEPSS 0.24%Jul 2, 2025
- High8.8The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_deCheck if you run itEPSS 0.81%Jul 2, 2025
- None0.0** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryJul 2, 2025
- Medium5.0In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.Check if you run itEPSS 0.16%Jul 2, 2025
- Critical9.8Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attaCheck if you run itEPSS 0.56%Jul 2, 2025
- Critical9.8ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.Check if you run itEPSS 0.50%Jul 2, 2025
- Medium5.3Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.Check if you run itEPSS 0.38%Jul 2, 2025
- Unknownavaya integrated_management Deserialization of Untrusted DataPatch nowKEVEPSS 21.97%Jul 2, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 10.15%Jul 2, 2025
- Unknownlb-link bl-ac2100_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.09%Jul 2, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.68%Jul 2, 2025
- Unknowntechnicolor tc7200_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 17.71%Jul 2, 2025
- High8.4In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM prCheck if you run itEPSS 0.19%Jul 1, 2025
- High7.4No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 3.91%Jul 1, 2025
- Medium5.4Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.30%Jul 1, 2025
- Medium6.3An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an attacker to disclose the names of private repositories within an oCheck if you run itEPSS 0.33%Jul 1, 2025
- High7.1Pillow is a Python imaging library.Check if you run itEPSS 0.32%Jul 1, 2025
- Medium6.5Escalade GLPI plugin is a ticket escalation process helper for GLPI.Check if you run itEPSS 0.28%Jul 1, 2025
- Critical9.1gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS (NativeWind).Check if you run itEPSS 1.18%Jul 1, 2025
- Medium5.8JUnit is a testing framework for Java and the JVM.Check if you run itEPSS 0.11%Jul 1, 2025
- High7.5@cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories.Check this weekEPSS 24.54%Jul 1, 2025
- High8.6RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io platform.Check if you run itEPSS 1.26%Jul 1, 2025
- Medium6.9A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical.Check if you run itEPSS 0.61%Jul 1, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0.Check if you run itEPSS 0.61%Jul 1, 2025
Sort