Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.44%Jul 23, 2025
- Medium6.5The Omnishop plugin for WordPress is vulnerable to Cross-Site Request Forgery on its /users/delete REST route in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.18%Jul 23, 2025
- Medium6.4The Valuation Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.3.2 due to insufficientCheck if you run itEPSS 0.29%Jul 23, 2025
- Medium5.3The Omnishop plugin for WordPress is vulnerable to Unauthenticated Registration Bypass in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.30%Jul 23, 2025
- Medium6.1The YANewsflash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.14%Jul 23, 2025
- High8.7A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical.Check if you run itEPSS 0.96%Jul 23, 2025
- Critical9.3PCL (Plain Craft Launcher) Community Edition is a Minecraft launcher.Check if you run itEPSS 0.16%Jul 23, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Jul 23, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.64%Jul 23, 2025
- Low2.0A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1.Check if you run itEPSS 0.30%Jul 22, 2025
- Low2.0A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2.Check if you run itEPSS 0.24%Jul 22, 2025
- Medium6.9A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2.Check if you run itEPSS 0.27%Jul 22, 2025
- Medium4.3HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend.Check if you run itEPSS 0.36%Jul 22, 2025
- Medium5.7A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1.Check if you run itEPSS 0.22%Jul 22, 2025
- Medium5.7A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2.Check if you run itEPSS 0.22%Jul 22, 2025
- High8.7DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted by attackers.Check if you run itEPSS 0.14%Jul 22, 2025
- Critical9.8Memory safety bugs present in Firefox 140 and Thunderbird 140.Check if you run itEPSS 0.48%Jul 22, 2025
- Critical9.8Focus incorrectly truncated URLs towards the beginning instead of around the origin.Check if you run itEPSS 0.43%Jul 22, 2025
- High8.8Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.Check if you run itEPSS 0.37%Jul 22, 2025
- High8.8Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.Check if you run itEPSS 0.40%Jul 22, 2025
- High8.1In some cases search terms persisted in the URL bar even after navigating away from the search page.Check if you run itEPSS 0.34%Jul 22, 2025
- High8.8Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.Check if you run itEPSS 0.46%Jul 22, 2025
- Medium6.5The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref.Check if you run itEPSS 0.43%Jul 22, 2025
- Critical9.8Thunderbird ignored paths when checking the validity of navigations in a frame.Check if you run itEPSS 0.27%Jul 22, 2025
- High8.1XSLT document loading did not correctly propagate the source document which bypassed its CSP.Check if you run itEPSS 0.38%Jul 22, 2025
Sort