Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials.Check if you run itEPSS 0.51%Jul 22, 2025
- Critical9.1Setting a nameless cookie with an equals sign in the value shadowed other cookies.Check if you run itEPSS 0.27%Jul 22, 2025
- High8.1Thunderbird cached CORS preflight responses across IP address changes.Check if you run itEPSS 0.45%Jul 22, 2025
- High8.1Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code.Check if you run itEPSS 0.38%Jul 22, 2025
- High8.1Thunderbird executed URLs when used in and tags.Check if you run itEPSS 0.38%Jul 22, 2025
- Critical9.8On arm64, a WASM instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address.Check if you run itEPSS 0.58%Jul 22, 2025
- Medium6.5On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack.Check if you run itEPSS 0.43%Jul 22, 2025
- Medium6.8Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets.Check if you run itEPSS 0.33%Jul 22, 2025
- High8.7A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6.Check if you run itEPSS 0.96%Jul 22, 2025
- Medium6.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded image's 'Title' and 'Slide link' fields in all versCheck if you run itEPSS 0.26%Jul 22, 2025
- Medium5.3A vulnerability was found in code-projects Food Ordering Review System 1.0.Check if you run itEPSS 0.44%Jul 22, 2025
- Low3.6A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function.Check if you run itEPSS 0.23%Jul 22, 2025
- Medium4.6Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting.Check if you run itEPSS 0.12%Jul 22, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.21%Jul 22, 2025
- High8.7A vulnerability was found in Tenda AC7 15.03.06.44.Check this weekEPSS 13.20%Jul 22, 2025
- High8.7An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms).Check if you run itEPSS 0.69%Jul 22, 2025
- High8.6: Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door/light 4 DU -83330-500.This issue affects Switch Actuator 4 DU-83330: All Versions; SwCheck if you run itEPSS 0.22%Jul 22, 2025
- Medium5.3The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata.Check if you run itEPSS 0.25%Jul 22, 2025
- Medium6.0The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver.Check if you run itEPSS 0.33%Jul 22, 2025
- Medium6.9Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B.Check if you run itEPSS 0.36%Jul 22, 2025
- High8.6WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI.Check if you run itEPSS 1.02%Jul 22, 2025
- Critical9.8The bSecure plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its order_info REST endpoint in versions 1.3.7 through 1.7.9.Check if you run itEPSS 0.79%Jul 22, 2025
- Medium6.1The Latest Post Accordian Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Jul 22, 2025
- Low2.4Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28.Check if you run itEPSS 0.21%Jul 22, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a.Check if you run itEPSS 0.39%Jul 22, 2025
Sort