Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3A SQL injection vulnerability has been found in DM Corporative CMS.Check if you run itEPSS 0.37%Jun 10, 2025
- High8.6Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: befCheck if you run itEPSS 0.19%Jun 10, 2025
- Medium5.1CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that could cause an unvalidatedCheck if you run itEPSS 0.23%Jun 10, 2025
- High8.6Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aCheck if you run itEPSS 0.21%Jun 10, 2025
- High7.1CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS request containing imprCheck if you run itEPSS 0.46%Jun 10, 2025
- Medium5.1CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could cause an unvalidated datCheck if you run itEPSS 0.30%Jun 10, 2025
- High7.1CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated HTTPS Content-Length headeCheck if you run itEPSS 0.63%Jun 10, 2025
- Medium5.1CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on Webserver that could cause an unvalidatedCheck if you run itEPSS 0.17%Jun 10, 2025
- High7.1CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to tCheck if you run itEPSS 0.53%Jun 10, 2025
- High7.0CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station whCheck if you run itEPSS 0.91%Jun 10, 2025
- Medium5.1CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on thCheck if you run itEPSS 0.26%Jun 10, 2025
- Medium6.9CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station.Check if you run itEPSS 0.63%Jun 10, 2025
- High8.6CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on theCheck if you run itEPSS 0.75%Jun 10, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025
- High7.5In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API.Check if you run itEPSS 1.03%Jun 10, 2025
- High8.8A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 1.07%Jun 10, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 10, 2025
- Critical9.9An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request.Check if you run itEPSS 0.44%Jun 10, 2025
- High8.8The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files sucCheck if you run itEPSS 0.61%Jun 10, 2025
- High7.5The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availabCheck if you run itEPSS 0.55%Jun 10, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in Zend.To up to 6.10-6 Beta.Check if you run itEPSS 1.70%Jun 10, 2025
- Medium6.9A vulnerability was found in Open5GS up to 2.7.3.Check if you run itEPSS 0.90%Jun 10, 2025
- Medium6.4The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 dueCheck if you run itEPSS 0.20%Jun 10, 2025
- Medium4.3The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.95.Check if you run itEPSS 0.15%Jun 10, 2025
- High8.8The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload vulnerability due to missing file type validation in the wcap_add_to_cart_popup_uploadCheck if you run itEPSS 0.56%Jun 10, 2025
Sort