Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fastw3b LLC FW Food Menu allows Path Traversal.Check if you run itEPSS 0.52%Jun 27, 2025
- Medium6.4The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the use of a templating engine in all versionsCheck if you run itEPSS 0.24%Jun 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJun 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJun 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJun 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJun 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJun 27, 2025
- Medium4.3The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a logged in user to view and download files belonging to another userCheck if you run itEPSS 0.26%Jun 27, 2025
- Medium4.8The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which couCheck if you run itEPSS 0.24%Jun 27, 2025
- Medium6.9Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders.Check if you run itEPSS 0.37%Jun 27, 2025
- High8.6An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders.Check if you run itEPSS 1.16%Jun 27, 2025
- Medium6.4The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ parameter in all versions up to, and including, 1.1.1 due to insufficient input saniCheck if you run itEPSS 0.27%Jun 27, 2025
- Low2.0Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.Check if you run itEPSS 0.15%Jun 27, 2025
- Low2.2Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.Check if you run itEPSS 0.24%Jun 27, 2025
- Medium6.4Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.Check if you run itEPSS 0.26%Jun 27, 2025
- Low2.0Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.Check if you run itEPSS 0.16%Jun 27, 2025
- Medium6.4Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.Check if you run itEPSS 0.26%Jun 27, 2025
- Low2.2Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.Check if you run itEPSS 0.24%Jun 27, 2025
- High7.5An issue in Hikvision DS-2CD1321-I V5.7.21 build 230819 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the endpoint /ISAPI/Security/challCheck if you run itEPSS 0.62%Jun 27, 2025
- Medium6.3D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.Check if you run itEPSS 0.39%Jun 27, 2025
- High8.1A state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairiCheck if you run itEPSS 0.28%Jun 27, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.12%Jun 27, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 1.75%Jun 27, 2025
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 26, 2025
- Low3.9pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.Check if you run itEPSS 0.13%Jun 26, 2025
Sort