Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Ruven Themes: Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ruven_button' shortcode in all versions up to, and including, 1.0 dCheck if you run itEPSS 0.21%Jul 18, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1.Check if you run itEPSS 0.31%Jul 18, 2025
- Medium4.0qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL.Check if you run itEPSS 0.47%Jul 18, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
- UnknownMicrosoft SharePoint Improper AuthenticationPatch nowKEVEPSS 99.89%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- Medium6.5An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint.Check if you run itEPSS 1.12%Jul 18, 2025
- Medium6.5An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploadinCheck if you run itEPSS 0.54%Jul 18, 2025
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 3.65%Jul 18, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 2.15%Jul 18, 2025
- UnknownCitrix virtual_apps_and_desktops Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 46.89%Jul 18, 2025
- High8.7Leviton AcquiSuite and Energy Monitoring Hub are susceptible to a cross-site scripting vulnerability, allowing an attacker to craft a malicious payload in URL parameters, which wouCheck if you run itEPSS 0.38%Jul 17, 2025
- Medium6.9A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.50%Jul 17, 2025
- Medium6.9A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.50%Jul 17, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0.Check if you run itEPSS 0.50%Jul 17, 2025
- Medium6.8A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface (CLI) in plain text within the command history.Check if you run itEPSS 0.11%Jul 17, 2025
- High7.1Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files.Check if you run itEPSS 0.27%Jul 17, 2025
- High8.7A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 6.73%Jul 17, 2025
- High8.6Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports ports 9000 and 8036.Check if you run itEPSS 0.18%Jul 17, 2025
- High8.7A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015.Check if you run itEPSS 0.99%Jul 17, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0.Check if you run itEPSS 0.61%Jul 17, 2025
- Medium5.3A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0.Check if you run itEPSS 0.30%Jul 17, 2025
- Medium5.3A vulnerability was found in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.48%Jul 17, 2025
- Medium4.7NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state thatCheck if you run itEPSS 0.15%Jul 17, 2025
- Medium5.3A vulnerability was found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.38%Jul 17, 2025
Sort