Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system.Check if you run itEPSS 0.65%Aug 28, 2025
- Medium5.4IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting.Check if you run itEPSS 0.18%Aug 28, 2025
- High7.8Local privilege escalation due to insecure folder permissions.Check if you run itEPSS 0.13%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- High8.8Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.4.8.Check if you run itEPSS 0.37%Aug 28, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a thrCheck if you run itEPSS 0.42%Aug 28, 2025
- Medium5.8Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a throCheck if you run itEPSS 0.22%Aug 28, 2025
- High8.1Improper Control of Generation of Code ('Code Injection') vulnerability in emarket-design YouTube Showcase youtube-showcase allows Object Injection.This issue affects YouTube ShowcCheck if you run itEPSS 0.31%Aug 28, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo golo allows Authentication Abuse.This issue affects Golo: from n/a through <= 1.7.0.Check if you run itEPSS 0.42%Aug 28, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue affects Golo: from n/a throughCheck if you run itEPSS 0.18%Aug 28, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects NeCheck if you run itEPSS 0.29%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ireca ireca allows PHP Local File Inclusion.This iCheck if you run itEPSS 0.53%Aug 28, 2025
- High7.1Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.22%Aug 28, 2025
- High7.1Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tiktok Feed: from n/a tCheck if you run itEPSS 0.24%Aug 28, 2025
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce csv import export extendons-eo-wooimport-export allows Path TrCheck if you run itEPSS 0.38%Aug 28, 2025
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V.Check if you run itEPSS 0.38%Aug 28, 2025
- High8.1Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System wp-ticket allows Object Injection.This issue affects WCheck if you run itEPSS 0.33%Aug 28, 2025
- High8.1Deserialization of Untrusted Data vulnerability in emarket-design Employee Spotlight employee-spotlight allows Object Injection.This issue affects Employee Spotlight: from n/a throCheck if you run itEPSS 0.33%Aug 28, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captcha.eu Captcha.eu captcha-eu allows Reflected XSS.This issue affects CaptcCheck if you run itEPSS 0.18%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kipso kipso allows PHP Local File Inclusion.This issCheck if you run itEPSS 0.54%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ovatheme Events ova-events allows PHP Local File ICheck if you run itEPSS 0.54%Aug 28, 2025
- High8.1Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injection.This issue affects WP Easy Contact: from n/a through <= 4.Check if you run itEPSS 0.33%Aug 28, 2025
Sort