Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A flaw was found in Moodle.Check if you run itEPSS 1.00%Apr 25, 2025
- Medium4.3A flaw was found in Moodle.Check if you run itEPSS 0.39%Apr 25, 2025
- High8.8A flaw was found in Moodle.Check if you run itEPSS 0.30%Apr 25, 2025
- Low3.1A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL.Check if you run itEPSS 0.37%Apr 25, 2025
- Medium4.3A flaw was found in Moodle.Check if you run itEPSS 0.34%Apr 25, 2025
- Low3.5A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request foCheck if you run itEPSS 0.18%Apr 25, 2025
- Medium4.3A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities.Check if you run itEPSS 0.34%Apr 25, 2025
- Medium4.3A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using twCheck if you run itEPSS 0.34%Apr 25, 2025
- High7.1A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, eCheck if you run itEPSS 0.41%Apr 25, 2025
- Low3.5In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabCheck this weekEPSS 63.03%Apr 25, 2025
- Medium4.9In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleCheck if you run itEPSS 0.56%Apr 25, 2025
- Medium4.3In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsCheck if you run itEPSS 1.03%Apr 25, 2025
- Medium5.4In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug sessionCheck if you run itEPSS 0.38%Apr 25, 2025
- Medium4.3A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks.Check if you run itEPSS 0.27%Apr 25, 2025
- High7.7An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responsesCheck if you run itEPSS 0.21%Apr 25, 2025
- High7.7The device exposes a web interface on ports TCP/3030 and TCP/9882.Check if you run itEPSS 0.29%Apr 25, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.60%Apr 25, 2025
- Critical9.8The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to,Check if you run itEPSS 0.47%Apr 25, 2025
- Medium5.3The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_coCheck if you run itEPSS 0.41%Apr 25, 2025
- High8.1The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.9.2.Check if you run itEPSS 0.52%Apr 25, 2025
- Medium5.5IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.23%Apr 25, 2025
- High7.5The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file.Check if you run itEPSS 0.56%Apr 25, 2025
- Medium6.1The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.dec.2012.Check if you run itEPSS 0.32%Apr 25, 2025
- High8.8The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_Check if you run itEPSS 0.39%Apr 25, 2025
- Medium5.4Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.28%Apr 25, 2025
Sort