Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.01%Jun 28, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.75%Jun 28, 2025
- Unknownstitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 28, 2025
- Unknowndataease dataease Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 15.88%Jun 28, 2025
- Medium6.4Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting inCheck if you run itEPSS 0.11%Jun 27, 2025
- High8.1Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.67%Jun 27, 2025
- Medium5.9Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.50%Jun 27, 2025
- Medium4.3Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.Check if you run itEPSS 0.20%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL InjectionCheck if you run itEPSS 0.40%Jun 27, 2025
- Medium5.2Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.Check if you run itEPSS 0.14%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection.Check if you run itEPSS 0.40%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection.Check if you run itEPSS 0.43%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Case Informatics Case ERP allows SQL Injection.Check if you run itEPSS 0.40%Jun 27, 2025
- High7.6A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions.Check if you run itEPSS 0.26%Jun 27, 2025
- Medium5.4IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injectionCheck if you run itEPSS 0.25%Jun 27, 2025
- High7.2Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability.Check if you run itEPSS 0.65%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects AiosCheck if you run itEPSS 0.14%Jun 27, 2025
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form 7 accept-stripe-payments-using-contact-form-7 allows RetrievCheck if you run itEPSS 0.28%Jun 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affecCheck if you run itEPSS 0.25%Jun 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows DOM-Based XSS.This issue affects OmniCheck if you run itEPSS 0.23%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in imw3 My Wp Brand my-wp-brand allows Cross Site Request Forgery.This issue affects My Wp Brand: from n/a through <= 1.1.3.Check if you run itEPSS 0.15%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in macbookandrew WP YouTube Live wp-youtube-live allows Cross Site Request Forgery.This issue affects WP YouTube Live: from n/a throCheck if you run itEPSS 0.16%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through <= 1.3.0.Check if you run itEPSS 0.16%Jun 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh WP Edit wp-edit allows Stored XSS.This issue affects WP Edit: from n/a thCheck if you run itEPSS 0.26%Jun 27, 2025
- Medium6.5Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is basedCheck if you run itEPSS 0.34%Jun 27, 2025
Sort