Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the system.Check if you run itEPSS 0.66%Apr 15, 2025
- Critical9.3A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the application, list credentials of userCheck if you run itEPSS 0.49%Apr 15, 2025
- Low2.6SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium4.8The Simple Social Media Share Buttons WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfoCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium4.8The Widget for Social Page Feeds WordPress plugin before 6.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium5.9A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design.Check if you run itEPSS 0.35%Apr 15, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium6.4The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rael_title_tagCheck if you run itEPSS 0.29%Apr 15, 2025
- Medium5.3Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placehCheck if you run itEPSS 0.36%Apr 15, 2025
- Medium6.7Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability.Check if you run itEPSS 0.13%Apr 15, 2025
- Medium6.7Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.18%Apr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryApr 15, 2025
- Medium5.1A vulnerability has been found in Demtec Graphytics 5.0.7 and classified as problematic.Check if you run itEPSS 0.33%Apr 15, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in Demtec Graphytics 5.0.7.Check if you run itEPSS 0.43%Apr 15, 2025
- Medium4.9The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and including, 2.4.6 due toCheck if you run itEPSS 0.41%Apr 15, 2025
- Medium6.1In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an incomplete fix for CVE-2024-8811.Check if you run itEPSS 0.52%Apr 15, 2025
- Medium6.1In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability.Check if you run itEPSS 0.29%Apr 15, 2025
Sort