Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Aug 15, 2025
- Low3.8The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function.Check if you run itEPSS 0.28%Aug 15, 2025
- Medium4.3The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fs_api_request functiCheck if you run itEPSS 0.37%Aug 15, 2025
- Medium5.3A vulnerability has been found in mtons mblog up to 3.5.0.Check if you run itEPSS 0.28%Aug 15, 2025
- High8.6A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could alloCheck if you run itEPSS 0.68%Aug 14, 2025
- High7.7A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software coCheck if you run itEPSS 0.54%Aug 14, 2025
- High8.6A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the devCheck if you run itEPSS 0.61%Aug 14, 2025
- Medium4.9A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitiveCheck if you run itEPSS 0.45%Aug 14, 2025
- High8.6A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticaCheck if you run itEPSS 0.78%Aug 14, 2025
- Medium5.3flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.22%Aug 14, 2025
- High8.7A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device.Check if you run itEPSS 0.32%Aug 14, 2025
- High8.7A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device.Check if you run itEPSS 0.32%Aug 14, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward pressforward allows Server Side Request Forgery.This issue affects PressForward: from n/a through <= 5Check if you run itEPSS 0.22%Aug 14, 2025
- Critical9.8FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.37%Aug 14, 2025
- Medium6.1The Injection Guard WordPress plugin before 1.2.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected CroCheck if you run itEPSS 0.22%Aug 14, 2025
- High8.8The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface.Check if you run itEPSS 0.57%Aug 14, 2025
- Critical10.0WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into incluCheck if you run itEPSS 2.46%Aug 13, 2025
- Critical10.0RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests.Check if you run itEPSS 2.04%Aug 13, 2025
- High8.7PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality.Check if you run itEPSS 1.52%Aug 13, 2025
- Medium6.5An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated useCheck if you run itEPSS 0.34%Aug 13, 2025
- Medium6.3NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memoryCheck if you run itEPSS 0.41%Aug 13, 2025
- High8.7When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cCheck if you run itEPSS 0.34%Aug 13, 2025
- Critical9.8In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.Check if you run itEPSS 0.39%Aug 13, 2025
- Medium6.5OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.Check if you run itEPSS 1.30%Aug 13, 2025
- Critical9.1Server side request forgery (SSRF) vulnerability in makeplane plane 0.23.1 via the password recovery.Check if you run itEPSS 0.31%Aug 13, 2025
Sort