Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.Check if you run itEPSS 0.29%Sep 5, 2025
- Medium4.3The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of its AJAX request handler, allowing any authenticated users, sCheck if you run itEPSS 0.23%Sep 5, 2025
- High8.4RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc.Check if you run itEPSS 0.17%Sep 5, 2025
- Medium5.3Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a useCheck if you run itEPSS 0.27%Sep 5, 2025
- High8.5Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22.Check if you run itEPSS 0.16%Sep 5, 2025
- Critical9.3Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22.Check if you run itEPSS 2.34%Sep 5, 2025
- Medium5.1Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form.Check if you run itEPSS 0.10%Sep 5, 2025
- Medium6.4The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input saniCheck if you run itEPSS 0.20%Sep 5, 2025
- High8.1The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter.Check if you run itEPSS 1.20%Sep 5, 2025
- High7.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.55%Sep 4, 2025
- Medium6.0ZF FROST is a Rust implementation of FROST (Flexible Round-Optimised Schnorr Threshold signatures).Check if you run itEPSS 0.29%Sep 4, 2025
- High7.2astro \@astrojs\/cloudflare Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.87%Sep 4, 2025
- Low2.1Weblate is a web based localization tool.Check if you run itEPSS 0.29%Sep 4, 2025
- Medium5.1api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX).Check if you run itEPSS 0.42%Sep 4, 2025
- High7.5Dynamics 365 FastTrack Implementation Assets Information Disclosure VulnerabilityCheck if you run itEPSS 0.85%Sep 4, 2025
- Medium6.5Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.81%Sep 4, 2025
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.28%Sep 4, 2025
- Medium5.1contactmanager is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX).Check if you run itEPSS 0.36%Sep 4, 2025
- Critical10.0argoproj argo_cd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.66%Sep 4, 2025
- Medium6.5Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs.Check if you run itEPSS 0.19%Sep 4, 2025
- Critical9.3Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications.Check if you run itEPSS 0.28%Sep 4, 2025
- High7.8In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recording capabilities due to improperCheck if you run itEPSS 0.08%Sep 4, 2025
- High8.2Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications.Check if you run itEPSS 0.24%Sep 4, 2025
- Medium6.2In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code.Check if you run itEPSS 0.08%Sep 4, 2025
- High8.4In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code.Check if you run itEPSS 0.20%Sep 4, 2025
Sort