Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Cross-Site Request Forgery (CSRF) vulnerability in wptasker WP Discord Post Plus – Supports Unlimited Channels allows Cross Site Request Forgery.Check if you run itEPSS 0.21%Aug 20, 2025
- High7.5Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects RealtynaCheck if you run itEPSS 0.21%Aug 20, 2025
- Unknownlangchain langchain Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 47.63%Aug 20, 2025
- Medium6.9flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.29%Aug 19, 2025
- Medium6.9A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 thCheck if you run itEPSS 0.25%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss During beacon miss handling, ath12k driCheck if you run itEPSS 0.16%Aug 19, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a number of cases we see kernel panics on resumCheck if you run itEPSS 0.25%Aug 19, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashVCheck if you run itEPSS 0.45%Aug 19, 2025
- Unknowntitool printmonitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.29%Aug 19, 2025
- High8.6Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance.Check if you run itEPSS 0.55%Aug 18, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- Unknownossrs simple_realtime_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.69%Aug 17, 2025
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup isCheck if you run itEPSS 6.06%Aug 16, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() There are multiple smb2_ea_info buffers inCheck if you run itEPSS 0.51%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock appears in a stack trace like: virtnet_probe(Check if you run itEPSS 0.12%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is used bCheck if you run itEPSS 0.13%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UFS-reset pin has no inteCheck if you run itEPSS 0.17%Aug 16, 2025
- Medium6.1The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Check if you run itEPSS 0.22%Aug 16, 2025
- Medium6.1The weichuncai(WP伪春菜) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.Check if you run itEPSS 0.14%Aug 16, 2025
- Medium6.1The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.Check if you run itEPSS 0.18%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check if you run itEPSS 0.18%Aug 16, 2025
- High7.5The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presCheck if you run itEPSS 0.51%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.18%Aug 16, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in iThemes ServerBuddy by PluginBuddy.Com allows Object Injection.This issue affects ServerBuddy by PluginBuddy.Com: from n/a througCheck if you run itEPSS 0.16%Aug 16, 2025
- Medium4.7Server-Side Request Forgery (SSRF) vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6.Check if you run itEPSS 0.26%Aug 15, 2025
Sort