Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A security flaw has been discovered in SeriaWei ZKEACMS up to 4.3.Check if you run itEPSS 0.39%Sep 21, 2025
- Medium5.3A vulnerability was identified in SeriaWei ZKEACMS up to 4.3.Check if you run itEPSS 0.46%Sep 21, 2025
- Medium5.3A flaw has been found in Harness 3.3.0.Check if you run itEPSS 0.34%Sep 21, 2025
- Medium4.3The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Sep 20, 2025
- Medium6.1The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.Check if you run itEPSS 0.15%Sep 20, 2025
- Medium6.1The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2.Check if you run itEPSS 0.15%Sep 20, 2025
- Medium4.3The Internal Links Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1.Check if you run itEPSS 0.16%Sep 20, 2025
- Medium5.1Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXPCheck if you run itEPSS 0.18%Sep 19, 2025
- High8.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (macOS/Linux client deployments) contain an arbitrary fileCheck if you run itEPSS 0.31%Sep 19, 2025
- Medium6.9Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 (macOS/Linux client deployments) contain a vulneraCheck if you run itEPSS 0.25%Sep 19, 2025
- High7.7AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.33%Sep 19, 2025
- Medium6.5Tenda ac6_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.29%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer dereference: __optee_disable_shm_Check if you run itEPSS 0.16%Sep 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ptp_ts_irq The E810 device has support for a "low latency" firmware inCheck if you run itEPSS 0.17%Sep 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects When the "proxy" option is enabled on a VXLANCheck if you run itEPSS 0.20%Sep 19, 2025
- Medium4.3The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request.Check if you run itEPSS 0.40%Sep 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request There are two check of 'mreplace' in raid10_synCheck if you run itEPSS 0.15%Sep 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, whicCheck if you run itEPSS 0.17%Sep 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nvme: fix multipath crash caused by flush request when blktrace is enabled The flush request initialized by blk_Check if you run itEPSS 0.16%Sep 18, 2025
- Medium5.3Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado.Check if you run itEPSS 0.29%Sep 18, 2025
- High8.7SQL injection vulnerability in Summar Software´s Portal del Empleado.Check if you run itEPSS 0.65%Sep 18, 2025
- High8.4The cbis_manager Podman container is vulnerable to remote command execution via the /api/plugins endpoint.Check if you run itEPSS 0.74%Sep 18, 2025
- Critical9.1The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value (e.g., sending negatiCheck if you run itEPSS 0.30%Sep 18, 2025
- High7.8Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request.Check if you run itEPSS 0.11%Sep 18, 2025
- Medium5.5Dragonfly is an open source P2P-based file distribution and image acceleration system.Check if you run itEPSS 0.14%Sep 17, 2025
Sort