Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function.Check if you run itEPSS 0.74%Jun 28, 2025
- Medium6.4The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’ parameter in all versCheck if you run itEPSS 0.25%Jun 28, 2025
- Medium6.4IBM Cognos Analytics 11.2.0 through 12.2.4 Fix Pack 5 and 12.0.0 through 12.0.4 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.20%Jun 28, 2025
- Medium5.4IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.Check if you run itEPSS 0.23%Jun 28, 2025
- Medium4.3IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.16%Jun 28, 2025
- Medium5.4IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.Check if you run itEPSS 0.24%Jun 28, 2025
- Medium6.0In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.Check if you run itEPSS 0.22%Jun 28, 2025
- Medium5.0In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal.Check if you run itEPSS 1.85%Jun 28, 2025
- Critical9.3The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a locCheck if you run itEPSS 0.17%Jun 28, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.01%Jun 28, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.75%Jun 28, 2025
- Unknownstitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 28, 2025
- Unknowndataease dataease Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 15.88%Jun 28, 2025
- Medium6.4Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting inCheck if you run itEPSS 0.11%Jun 27, 2025
- High8.1Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.67%Jun 27, 2025
- Medium5.9Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.50%Jun 27, 2025
- Medium4.3Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.Check if you run itEPSS 0.20%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL InjectionCheck if you run itEPSS 0.40%Jun 27, 2025
- Medium5.2Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.Check if you run itEPSS 0.14%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection.Check if you run itEPSS 0.40%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection.Check if you run itEPSS 0.43%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Case Informatics Case ERP allows SQL Injection.Check if you run itEPSS 0.40%Jun 27, 2025
- High7.6A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions.Check if you run itEPSS 0.26%Jun 27, 2025
- Medium5.4IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injectionCheck if you run itEPSS 0.25%Jun 27, 2025
- High7.2Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability.Check if you run itEPSS 0.65%Jun 27, 2025
Sort