Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices.Check if you run itEPSS 0.87%Jul 24, 2025
- High8.5Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own.Check if you run itEPSS 4.20%Jul 24, 2025
- Medium6.4The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a custom widget in all versions up to, andCheck if you run itEPSS 0.30%Jul 24, 2025
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 85.50%Jul 24, 2025
- Medium5.3A vulnerability was found in deerwms deer-wms-2 up to 3.3.Check if you run itEPSS 0.51%Jul 24, 2025
- High7.1HCL iAutomate is affected by an insufficient session expiration.Check if you run itEPSS 0.38%Jul 24, 2025
- High7.6HCL iAutomate is affected by a sensitive data exposure vulnerability.Check if you run itEPSS 0.34%Jul 24, 2025
- Critical9.3The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the InternetCheck if you run itEPSS 0.56%Jul 24, 2025
- Medium5.9Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue afCheck if you run itEPSS 2.76%Jul 24, 2025
- Critical9.0A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff.Check if you run itEPSS 0.95%Jul 24, 2025
- Critical9.6A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff.Check if you run itEPSS 1.01%Jul 24, 2025
- Medium4.7A flaw was found in libssh, a library that implements the SSH protocol.Check if you run itEPSS 0.26%Jul 24, 2025
- Medium6.4The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficCheck if you run itEPSS 0.46%Jul 24, 2025
- Medium6.1The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2.Check if you run itEPSS 0.24%Jul 24, 2025
- Medium4.3The iThoughts Advanced Code Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.10.Check if you run itEPSS 0.20%Jul 24, 2025
- Medium6.1The FunnelCockpit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘error’ parameter in all versions up to, and including, 1.4.3 due to insufficient inpCheck if you run itEPSS 0.49%Jul 24, 2025
- Medium6.4The Taeggie Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's taeggie-feed shortcode in all versions up to, and including, 0.1.10.Check if you run itEPSS 0.45%Jul 24, 2025
- Medium6.4The Structured Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_fs_local_business shortcode in all versions up to, and including, 1.6.4Check if you run itEPSS 0.48%Jul 24, 2025
- Medium6.1The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.Check if you run itEPSS 0.60%Jul 24, 2025
- Critical9.8The Ebook Store plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ebook_store_save_form function in all versions up to, and inCheck if you run itEPSS 1.48%Jul 24, 2025
- Critical9.8iqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.59%Jul 24, 2025
- Medium6.4The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements (Copyright Element, Hover Box, SeparatoCheck if you run itEPSS 0.31%Jul 24, 2025
- High8.8WPExperts post_smtp Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.63%Jul 24, 2025
- Critical9.3A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module.Check if you run itEPSS 2.38%Jul 23, 2025
- Medium6.1A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScriCheck this weekEPSS 46.15%Jul 23, 2025
Sort