Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCCCheck if you run itEPSS 0.16%Aug 26, 2025
- Medium4.8The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC (Check if you run itEPSS 0.13%Aug 26, 2025
- Medium4.8The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-ProCheck if you run itEPSS 0.13%Aug 26, 2025
- Medium6.1Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files withCheck if you run itEPSS 0.10%Aug 26, 2025
- Medium5.3An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properlyCheck if you run itEPSS 0.21%Aug 26, 2025
- Medium6.5Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: fromCheck if you run itEPSS 0.23%Aug 26, 2025
- High7.1A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.37%Aug 26, 2025
- Medium4.7The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.118.0.Check if you run itEPSS 0.19%Aug 26, 2025
- Medium4.3The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tf_order_status_email_resend_function, tf_visitor_detaiCheck if you run itEPSS 0.25%Aug 26, 2025
- High7.8Delta Electronics COMMGR has Code Injection vulnerability.Check if you run itEPSS 0.21%Aug 26, 2025
- High8.6Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability.Check if you run itEPSS 0.42%Aug 26, 2025
- Medium5.5Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability.Check if you run itEPSS 0.18%Aug 26, 2025
- Critical9.8The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user.Check if you run itEPSS 0.52%Aug 26, 2025
- Medium6.9A vulnerability has been found in SourceCodester Human Resource Information System 1.0.Check if you run itEPSS 0.51%Aug 26, 2025
- Medium6.9A flaw has been found in SourceCodester Human Resource Information System 1.0.Check if you run itEPSS 0.51%Aug 26, 2025
- High8.8The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5.Check if you run itEPSS 0.45%Aug 26, 2025
- Low2.0A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS.Check if you run itEPSS 0.14%Aug 26, 2025
- Medium6.9A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0.Check if you run itEPSS 0.50%Aug 26, 2025
- Medium6.9A vulnerability was found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.44%Aug 26, 2025
- Medium6.9A vulnerability has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.55%Aug 26, 2025
- Medium6.9A flaw has been found in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.55%Aug 26, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.55%Aug 26, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.55%Aug 26, 2025
- High7.5The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on thCheck if you run itEPSS 0.43%Aug 26, 2025
- Medium5.3A weakness has been identified in diyhi bbs up to 6.8.Check if you run itEPSS 0.38%Aug 26, 2025
Sort