Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%Jun 16, 2025
- Medium5.3A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical.Check if you run itEPSS 0.51%Jun 15, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1.Check if you run itEPSS 2.68%Jun 15, 2025
- Medium5.1A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295.Check if you run itEPSS 0.29%Jun 15, 2025
- High8.4A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.Check this weekEPSS 13.02%Jun 15, 2025
- High7.6An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malCheck if you run itEPSS 0.26%Jun 15, 2025
- Medium5.3A vulnerability was found in comfyanonymous comfyui up to 0.3.39.Check if you run itEPSS 0.38%Jun 15, 2025
- High8.7A vulnerability was found in H3C GR-3000AX V100R007L50.Check if you run itEPSS 0.66%Jun 15, 2025
- Medium6.9Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.Check if you run itEPSS 0.37%Jun 15, 2025
- Medium6.9Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.Check if you run itEPSS 0.34%Jun 15, 2025
- High8.7A vulnerability was found in H3C GR-5400AX V100R009L50 and classified as critical.Check if you run itEPSS 0.66%Jun 15, 2025
- Low2.1PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.Check if you run itEPSS 0.34%Jun 15, 2025
- Medium5.3A vulnerability has been found in Astun Technology iShare Maps 5.4.0 and classified as problematic.Check if you run itEPSS 0.34%Jun 15, 2025
- Medium4.7IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.1Check if you run itEPSS 0.36%Jun 15, 2025
- High7.8IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges.Check if you run itEPSS 0.17%Jun 15, 2025
- Medium6.4The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.5.0 due to insufficieCheck if you run itEPSS 0.30%Jun 14, 2025
- Medium6.4The Slider, Gallery, and Carousel by MetaSlider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘aria-label’ parameter in all versions up to, and includinCheck if you run itEPSS 0.27%Jun 14, 2025
- Medium6.4The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ssa_admin_upcomingCheck if you run itEPSS 0.29%Jun 14, 2025
- Medium6.4The Click to Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-no_number’ parameter in all versions up to, and including, 4.22 to insufficient inCheck if you run itEPSS 0.28%Jun 14, 2025
- Medium6.5The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output() function.Check if you run itEPSS 0.64%Jun 14, 2025
- Medium4.3The Yougler Blogger Profile Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, v1.01.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium4.3The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium6.1The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.Check if you run itEPSS 0.13%Jun 14, 2025
- Medium6.4The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘status-classic-offline-text’ parameter in all versions up to, and inclCheck if you run itEPSS 0.28%Jun 14, 2025
- Medium6.1The Easy Flashcards plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.Check if you run itEPSS 0.22%Jun 14, 2025
Sort