Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Raisely Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's raisely_donation_form shortcode in all versions up to, and including, 1Check if you run itEPSS 0.32%May 21, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityPatch nowKEVEPSS 93.31%May 21, 2025
- High8.7Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary filesCheck if you run itEPSS 0.83%May 21, 2025
- High8.2Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.Check if you run itEPSS 0.90%May 21, 2025
- Medium6.9Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.Check if you run itEPSS 0.46%May 21, 2025
- High8.3Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.Check if you run itEPSS 0.82%May 21, 2025
- High8.2Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.Check if you run itEPSS 0.56%May 21, 2025
- Medium6.8In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git trCheck if you run itEPSS 0.84%May 21, 2025
- Critical9.8The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to brutefoCheck this weekEPSS 16.43%May 21, 2025
- Medium6.5A vulnerability was found in the libsoup package.Check if you run itEPSS 0.91%May 21, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702.Check if you run itEPSS 0.71%May 21, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 21, 2025
- Medium4.8A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0.Check if you run itEPSS 0.44%May 21, 2025
- High8.6The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.37%May 21, 2025
- Medium6.1The ns_backup extension through 13.0.0 for TYPO3 allows XSS.Check if you run itEPSS 0.24%May 21, 2025
- High8.6The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.37%May 21, 2025
- Medium6.8The ns_backup extension through 13.0.0 for TYPO3 allows command injection.Check if you run itEPSS 0.77%May 21, 2025
- Medium6.4The cs_seo extension through 9.2.0 for TYPO3 allows XSS.Check if you run itEPSS 0.25%May 21, 2025
- Medium5.3The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.Check if you run itEPSS 0.30%May 21, 2025
- High8.6The ns_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location.Check if you run itEPSS 0.37%May 21, 2025
- Critical10.0The sr_feuser_register extension through 12.4.8 for TYPO3 allows Remote Code Execution.Check if you run itEPSS 0.86%May 21, 2025
- High8.1Blog Designer PRO for WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 0.58%May 21, 2025
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature.Check if you run itEPSS 0.31%May 21, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32.Check if you run itEPSS 0.26%May 21, 2025
- High7.2A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the MoCheck if you run itEPSS 0.47%May 21, 2025
Sort