Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘redirectURL’ parameter in all versionsCheck if you run itEPSS 0.28%Jul 9, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36849.Open the advisoryJul 9, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36848.Open the advisoryJul 9, 2025
- Critical10.0An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crCheck this weekEPSS 16.38%Jul 9, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36847.Open the advisoryJul 9, 2025
- High7.5Zimbra Collaboration (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 is vulnerable to a denial of service condition due to improper handling of excessiCheck if you run itEPSS 1.61%Jul 9, 2025
- High7.5Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh.Check if you run itEPSS 0.56%Jul 9, 2025
- UnknownInsertion of Sensitive Information into Externally-Accessible File or DirectoryPatch nowKEVEPSS 46.63%Jul 9, 2025
- Critical9.8The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in the sb_encryption() function inCheck if you run itEPSS 0.39%Jul 8, 2025
- High7.5IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading servicCheck if you run itEPSS 0.42%Jul 8, 2025
- Medium5.4Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject mCheck if you run itEPSS 0.27%Jul 8, 2025
- Medium5.4Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject mCheck if you run itEPSS 0.27%Jul 8, 2025
- Medium5.5Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.21%Jul 8, 2025
- Medium5.5Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.28%Jul 8, 2025
- Medium5.5Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.25%Jul 8, 2025
- Medium6.9A vulnerability was found in code-projects Jonnys Liquor 1.0.Check if you run itEPSS 0.49%Jul 8, 2025
- Medium6.5Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affCheck if you run itEPSS 0.41%Jul 8, 2025
- Medium5.2ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 1.33%Jul 8, 2025
- Critical9.3ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in a SecurCheck if you run itEPSS 0.67%Jul 8, 2025
- Medium4.5ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in a securCheck if you run itEPSS 0.59%Jul 8, 2025
- Medium6.2ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read.Check if you run itEPSS 0.44%Jul 8, 2025
- Medium4.3ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to injCheck if you run itEPSS 0.88%Jul 8, 2025
- Medium6.8ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in a SecurCheck if you run itEPSS 0.74%Jul 8, 2025
- Medium4.3ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to injCheck if you run itEPSS 0.88%Jul 8, 2025
- Medium4.3ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to injCheck if you run itEPSS 0.88%Jul 8, 2025
Sort