Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the and parameters in all versions up to,Check if you run itEPSS 0.24%Sep 6, 2025
- Medium6.4The Html Social share buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zm_sh_btn' shortcode in all versions up to, and including, 2.1.16Check if you run itEPSS 0.24%Sep 6, 2025
- Medium5.3The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via thCheck if you run itEPSS 0.27%Sep 6, 2025
- High7.3The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including,Check if you run itEPSS 0.36%Sep 6, 2025
- High8.1ERP is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.33%Sep 6, 2025
- High7.9Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading toCheck if you run itEPSS 0.17%Sep 5, 2025
- Critical9.8ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.29%Sep 5, 2025
- Medium5.3fs2 is a compositional, streaming I/O library for Scala.Check if you run itEPSS 0.45%Sep 5, 2025
- Medium5.3A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24.Check if you run itEPSS 0.39%Sep 5, 2025
- Criticalinternetarchive Vulnerable to Directory Traversal in File.download()Check if you run itEPSS 1.59%Sep 5, 2025
- Medium6.5An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query.Check if you run itEPSS 0.32%Sep 5, 2025
- Medium6.5MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commitCheck if you run itEPSS 0.38%Sep 5, 2025
- Medium4.7Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.41%Sep 5, 2025
- Medium6.5An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers.Check if you run itEPSS 0.29%Sep 5, 2025
- Medium5.1A vulnerability was found in itsourcecode POS Point of Sale System 1.0.Check if you run itEPSS 0.29%Sep 5, 2025
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.31%Sep 5, 2025
- High8.1There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and sucCheck if you run itEPSS 1.16%Sep 5, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.42%Sep 5, 2025
- Medium6.4The Biagiotti Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.3 due to insufficient input sanitization aCheck if you run itEPSS 0.20%Sep 5, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array Fix a potential out-of-bounds array access of th…Check if you run itEPSS 0.15%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access support is imp…Check if you run itEPSS 0.15%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to…Check if you run itEPSS 0.15%Sep 5, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() In the interrupt handler rain_…Check if you run itEPSS 0.14%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel deb…Check if you run itEPSS 0.15%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability [Why] A null pointer dereference vuln…Check if you run itEPSS 0.20%Sep 5, 2025
Sort