Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue aCheck if you run itEPSS 0.13%Aug 27, 2025
- Medium6.5Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro ThCheck if you run itEPSS 0.23%Aug 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Stored XSS.This iCheck if you run itEPSS 0.17%Aug 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elements uicore-elements allows Stored XSS.This issue affects UiCheck if you run itEPSS 0.17%Aug 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Stored XSS.This issueCheck if you run itEPSS 0.17%Aug 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue afCheck if you run itEPSS 0.17%Aug 27, 2025
- Medium4.3Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UnCheck if you run itEPSS 0.20%Aug 27, 2025
- Medium4.3Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP BulkCheck if you run itEPSS 0.18%Aug 27, 2025
- Medium4.2Basecamp's Google Sign-In adds Google sign-in to Rails applications.Check if you run itEPSS 0.25%Aug 27, 2025
- High7.4A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series SwitchesCheck if you run itEPSS 0.28%Aug 27, 2025
- Medium5.5A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 FabriCheck if you run itEPSS 0.14%Aug 27, 2025
- Medium5.0A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode couCheck if you run itEPSS 0.35%Aug 27, 2025
- Medium4.4A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affecCheck if you run itEPSS 3.17%Aug 27, 2025
- Medium6.0A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any fileCheck if you run itEPSS 0.18%Aug 27, 2025
- Medium6.5Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges toCheck if you run itEPSS 1.25%Aug 27, 2025
- Medium5.4A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker withCheck if you run itEPSS 0.22%Aug 27, 2025
- High7.1A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker toCheck if you run itEPSS 0.45%Aug 27, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attCheck if you run itEPSS 0.23%Aug 27, 2025
- Medium5.0A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attackerCheck if you run itEPSS 0.30%Aug 27, 2025
- Medium5.4A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attackerCheck if you run itEPSS 0.26%Aug 27, 2025
- Medium6.5A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.Check if you run itEPSS 0.59%Aug 27, 2025
- High7.5GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking andCheck if you run itEPSS 0.36%Aug 27, 2025
- Medium6.9A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927.Check this weekEPSS 12.21%Aug 27, 2025
- High7.8Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Aug 27, 2025
- Medium5.3A flaw has been found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.43%Aug 27, 2025
Sort